Security Compliance Specialist II

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Compliance Specialist II based in India.

We are looking for a detail-oriented Security Compliance Specialist II to strengthen the security and compliance posture of a global technology environment. In this role, you will evaluate security controls, identify potential risks, support internal assessments, and coordinate third-party audits against internationally recognized security standards. You will work closely with Engineering, DevOps, IT, and business stakeholders to ensure that security requirements are effectively implemented and documented. Your expertise will help translate complex technical security practices into clear compliance evidence and actionable remediation plans. You will also contribute to improving audit efficiency through automation, governance, risk, and compliance (GRC) tools. This is an excellent opportunity to develop your expertise in information security compliance while supporting large-scale cloud, network, and digital infrastructure.

Accountabilities

• Security Compliance Management: Support security compliance programs by conducting control testing, evaluating risks, identifying control deficiencies, and contributing to continuous improvements across the organization's security framework.

• Security Control Assessments: Perform design and operational effectiveness assessments of technical, physical, and organizational security controls against standards such as SOC 2, ISO 27001, PCI DSS, and other relevant frameworks.

• Technical Control Evaluation: Assess the effectiveness of security controls related to Identity and Access Management (IAM), Change Management, Vulnerability Management, Logging, and Monitoring.

• Audit Coordination: Support internal and external audits by coordinating evidence collection, managing documentation, preparing audit materials, and ensuring timely completion of compliance activities.

• Technical Walkthroughs: Organize and lead technical discussions with Engineering, DevOps, IT, and system owners to understand security processes, validate control implementation, and review supporting evidence.

• Evidence Review and Validation: Coordinate sampling populations, examine technical documentation, validate control evidence, and ensure that compliance requirements are adequately demonstrated.

• Risk and Gap Identification: Identify control weaknesses, document exceptions and recurring trends within GRC platforms, and collaborate with relevant stakeholders to address compliance gaps.

• Remediation Management: Develop actionable remediation plans, coordinate corrective actions with system owners, and monitor progress to ensure identified deficiencies are resolved.

• Third-Party Audit Support: Facilitate external compliance assessments by coordinating evidence requests, explaining technical controls to auditors, and minimizing operational disruption throughout the audit process.

• Process Optimization: Identify opportunities to streamline compliance activities, improve audit readiness, and enhance operational efficiency through automation and effective use of GRC tools.

• Cross-Functional Collaboration: Partner with security, engineering, infrastructure, and business teams to strengthen security practices and maintain alignment with industry standards and organizational requirements.

Requirements

• Professional Experience: 2–6 years of relevant experience in information security, security compliance, IT auditing, risk management, or a related field.

• Security Compliance Frameworks: Practical experience assessing security controls against recognized industry standards, particularly SOC 2, ISO 27001, and PCI DSS.

• Technical Security Knowledge: Strong understanding of technical security controls, including Identity and Access Management, Change Management, Vulnerability Management, Logging, and Monitoring.

• Control Testing and Auditing: Experience evaluating control design and operational effectiveness, reviewing technical evidence, identifying gaps, and supporting internal or external audits.

• Risk Assessment: Ability to identify security risks, assess control deficiencies, document exceptions, and recommend appropriate remediation measures.

• GRC Platforms: Familiarity with governance, risk, and compliance tools for managing audit evidence, tracking exceptions, documenting findings, and monitoring remediation activities.

• Cloud and Infrastructure Knowledge: Exposure to cloud infrastructure, containerized environments, or distributed systems is considered an advantage.

• Audit and Security Certifications: Certifications such as CISA, CRISC, Security+, CISM, or ISO 27001 Lead Auditor are advantageous but not mandatory.

• Analytical Skills: Excellent analytical, critical-thinking, and problem-solving abilities, with strong attention to detail and the ability to investigate complex technical and compliance issues.

• Communication Skills: Strong written and verbal communication skills, including the ability to explain technical security controls and compliance requirements to both technical and non-technical stakeholders.

• Collaboration: Ability to work effectively with cross-functional teams, coordinate multiple audit activities, and build productive relationships with system owners and business stakeholders.

• Adaptability: A proactive and organized approach to managing competing priorities, meeting deadlines, and contributing to continuous improvements in a dynamic technology environment.

Benefits

• Fully remote working arrangement in India, with flexibility to work from home, an office, or a combination depending on role requirements.

• Flexible working approach designed to support employee productivity and individual working preferences.

• Comprehensive benefits supporting physical health, mental well-being, financial security, and personal needs.

• Opportunities to work with cutting-edge web security, cloud, and edge computing technologies.

• Exposure to internationally recognized security and compliance frameworks, including SOC 2, ISO 27001, FedRAMP, and PCI DSS.

• Collaboration with experienced global security, engineering, and compliance professionals.

• Opportunities to strengthen expertise in information security, risk management, auditing, and GRC operations.

• Professional development and continuous learning opportunities within a global technology environment.

• The opportunity to contribute to security initiatives protecting large-scale digital infrastructure and services used worldwide.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1