Compliance/ Audit Analyst - Remote
Riversand
Here at Syndigo, we're enabling our clients to deliver better eCommerce experiences. We've mastered the right data, right now. From creation to sale, that's the value our partners get from us - a holistic, truly differentiated end-to-end solution that closes the loop while increasing sales.
Basically, we're the accurate data behind how people feel when they shop online with confidence!
We cannot do all of this without our amazing people! Our employees make the magic happen here at Syndigo and we're growing rapidly! We're ready for you to collaborate with us to challenge the status quo!
The Analyst- Compliance at Syndigo is responsible for managing compliance on Information Security controls. Review and propose changes to existing policies, procedures and controls based on a risk-based approach to ensure compliance with latest information security policies, regulations, and standards. Coordinate to conduct internal and external audits for ISO 27001 & SOC 2 Type 2 frameworks. Coordinate for timely remediation of non-conformities identified from audits and vulnerabilities identified from penetration tests. Engage with prospects, customers, and partners in meetings/calls, completion of security questionnaires, assessments, and audits. Perform work responding to RFPs.
Reporting to Syndigo’s Senior Manager-Information Security- Compliance, this candidate can work from home, Bangalore local candidates preferred.
Responsibilities:
- Review and propose changes to existing policies, procedures and controls based on a risk-based approach to ensure compliance with latest information security policies, regulations, and standards.
- Seek input on emerging threats that warrant additional controls. Communicate updates to tech and business owners.
- Monitor and manage compliance of Syndigo’s information security controls.
- Coordinate internal and external security assessments and audits.
- Coordinate timely remediation of security incidents and/or non-conformances.
- Engage with prospects, customers, and partners in meetings/calls, completion of security questionnaires, assessments, and audits.
- Review and propose changes to existing policies, procedures and controls based on a risk-based approach to ensure compliance with latest information security policies, regulations, and standards.
- Seek input on emerging threats that warrant additional controls. Communicate updates to tech and business owners.
- Keep up to date with IT infrastructure and Information security technologies.
Experience:
- 2 years + experience with one or more of the following: SOC 2, NIST, ISO 27001 Series, PCI DSS, HIPAA etc.
- Good knowledge of regulations governing personal data and other regulatory compliance frameworks like GDPR and CCPA
- Experienced in internal and external audits for SOC2, ISO 27001, HIPAA, PCI DSS
- Experience with building and maintaining relationships across all levels and functional areas.
- Expertise in SaaS application operations and identity management
- Strong technical knowledge and hands-on experience of IT infrastructure, Cloud Security and security technologies
- Proven experience working with third-party consultants and auditors.
- Experience with participating in customer and prospect calls related to security & compliance topics including making presentations.
Diversity, Equity & Inclusion
Authenticity fuels our work. In fact, it’s one of our Syndigo Values. To achieve the best version of our organization, we know it takes new ideas, new approaches, new perspectives and new ways of thinking. A purpose we are 100% committed to cultivating.
Diversity is woven into our fabric at Syndigo and it’s how we stay an industry leader, innovating technology solutions that equip our customers with everything they need to be successful!
All are welcome here and we invite you to join our team if you are ready to help us continue that growth!
GDPR/CCPA
Syndigo, to process applications, holds onto data for a "reasonable time" after applications are submitted. This data is stored for Syndigo's internal use by HR/Recruiting Staff only. Verified requests for data deletion and exports will be completed upon request.
Syndigo Job Applicant Privacy Notice
At Syndigo, we care about your privacy. As you go through our recruitment process, we are committed to being transparent about how we process your personal data. To learn more about how Syndigo processes your personal data, go to our Job Applicant Privacy Notice.