Senior Compliance Analyst

Signzy is a digital trust system. We provide identification, background checks, forgery detectionand contract management systems which enable contracting in a trustable, safe, legal, andconvenient manner. Our biometric user authentication system and blockchain-based digital trailensure non-repudiation. This increases compliance and enforceability in the court of law. Weconsist of a tech-savvy team and are backed by investors who are enthusiastic about creatingsolutions with technology.Working at Signzy● At Signzy we breathe software and exploit the latest technologies to create the mostamazing products. We comprise a tech-savvy team and are backed by investors who areenthusiastic about creating solutions using technology.● Signzy is looking for an Compliance Analyst. If you think you have what ittakes to get the job done, this is an invitation to be a part of the futureJD for role of Compliance Analyst - IIResponsibilitiesDevelopment, implementation, and management of security policies, standards, guidelines, and procedures to ensure the ongoing improvement and maintenance of security posture in line with ISO 27001, SOC2 Type 2, PCI DSS etc.,Understand technical implementation details necessary to assess general and situational Information Security risk.Coordinate with multiple teams across the organization for the AuditsLead the Third Party Risk Management audits conducted by Banks and other AuthoritiesClosely interact and work with Clients[Banks, Fintechs etc] in ensuring smooth audit process and TPRMCoordinate internal and external audits, ensuring timely collection of artifacts and responses.Manage the end-to-end vendor/partner onboarding risk process - due diligence, risk assessment, contract compliance, and continuous monitoring.Maintain and improve the enterprise GRC framework aligned to ISO 27001/27701, SOC 2, PCI-DSSSupport risk assessments (operational, cyber, privacy) and maintain risk registers.Design, implement, maintain, and improve programs to address key company risks and prepare internal teams for independent assessments against a wide variety of regulatory and compliance frameworks.Demonstrated experience with common compliance frameworks (SOX, GDPR, CCPA, PCI, ISO27000, NIST Cybersecurity Framework, NIST SP800-53)Understanding of security best practices (Password security, device security etc) in the context of Security Training and AwarenessConduct internal control testing and compliance reviews across infrastructure, applications, and processes.Establishing appropriate levels of security controls, systems monitoring, and security audits.Assisting in the security engineering team with prioritizing patches and security fixes.Improve controls for internal systems, processes, and policies.Support the execution of multiple audit programs internally and externally.Provide clear expectations and direction to security and engineering teams on audit requirements.RequirementsMust Have3+ years of proven experience in information security, audit, compliance, risk assessment, and management.Hands-on experience in managing and driving security compliance mainly ISO 27001, PCI DSS, Data Localization and Bank AuditsAbility to prioritise, manage, and deliver on multiple projects simultaneously and partner with management in support of key initiatives and projects.Knowledge of pragmatic security controls across all security domains such as access management, encryption methods, vulnerability management, network security, etc.Experience developing and producing security metrics and reports that are meaningful and actionable across various audiences.In-depth understanding of the regulatory requirements and trends in the FinTech domain.Ability to communicate to management, technical, and non-technical persons about the risk associated with the business.Defining and maintaining the policies as per ISMS frameworkMonitor third-party risk assessments and assist in performing internal risk assessments.Good to HaveCertifications such as ISO27001 Lead Auditor/ImplementerCISA/CISM certification would be a plusAbility to use basic automation/scripting (Python, SQL) for evidence collection.Experience with SIEM/SOC outputs to validate alerts as audit evidence.Knowledge of data governance/DLP tools.Awareness of AI/ML governance and evolving regulatory frameworks.Skills in continuous compliance (CI/CD, IaC scanning).Well-versed with data security and data privacy.Strong team player, but can work and execute independentlyBrilliant written, verbal communication, and interpersonal skills