Security Compliance Analyst

Job Title: Security Compliance Analyst

Location: Pune, India

Primary Duties

Update and improve security policies & procedures.

Perform user access reviews.

Perform third-party risk management reviews and other forms of risk management.

Conduct or assist with compliance audits.

Foster continuous improvements that enhance overall security & compliance.

Assist with the production of security program metrics.

Governance

Update security policies and procedures to enhance security & compliance, meet evolving customer and partner requirements, meet evolving regulatory mandates, and address IT risk areas.

Audit and improve compliance with Comscores policies.

Assist with gathering operational statistics in support of program metrics.

Access Reviews

Support Comscore’s user access review process and tool.

Reliably perform user access reviews to ensure positive audit outcomes.

Improve access controls and the access management process.

Risk Management

Contribute to the Comscore Risk Register process to identify, document, treat, or escalate risk areas.

Leverage Comscore’s vendor risk management tool to conduct third party risk management security reviews.

Update vendor questionnaires to address new risk areas.

Compliance

Monitor user activity, internal processes, and infrastructure for compliance with Comscore policies.

Develop security controls to improve compliance.

Contribute to security awareness training.

Collaborate with external auditors and the Internal Audit team to support ISO 27001/27701 and Sarbanes Oxley (SOX) audits.

Qualifications/Experience

Educational Qualifications

Bachelor's degree in information systems or equivalent work experience.

Industry Certifications (e.g. CISA).

Technical Competency

Knowledge of information security principles, including access control and risk management.

Experience performing access reviews and using access review tools. Familiarity with Conductor One is preferred.

Knowledge of GRC tools. Familiarity with Drata is a plus.

Experience in developing, documenting and maintaining security and compliance policies and procedures.

Experience with information security management frameworks, such as ISO 27001, NIST, GDPR, CCPA, or other privacy regulations.

Prior audit experience. Familiarity with ISO 27001 and ISO 27701 preferred.

Experience in developing, documenting and maintaining security procedures.

Experience coordinating BC/DR projects and knowledge of common DR practices.

Experience with ticketing systems (familiarity with Jira preferred).

Experience with Windows and Linux operating systems.

Experience with cloud service providers (AWS preferred).

Experience with Active Directory.

Experience with Power Shell.

Experience with Identity and Access Management and Privilege Access Management tools.

Occupational Personality

Ability to follow established procedures reliably and with attention to detail.

Ability to work well under minimal supervision.

Strong written and verbal communication skills.

Strong analytical and problem-solving skills.

Continuous improvement mindset.

Ability to document procedures.

Strong team-oriented interpersonal skills.

Strong customer/client focus, with the ability to manage expectations appropriately, provide a superior customer/client experience and build long-term relationships.

Ability to interface effectively with a broad range of people and roles, including senior leadership and technical personnel.

Ability to work under stress and handle multiple high-pressure situations simultaneously.

Ability to work in meetings during US hours as needed (Pacific and Eastern Time)