Compliance Analyst

Role: Compliance Analyst

Exp: 1-2 Years

Work Mode: Mohali WOrk form Office

Time: 10am - 8pm IST

Role Summary
RChilli is seeking a Compliance Analyst to support IT compliance information security governance and regulatory
readiness across ISO/IEC 27001:2022 SOC 2 Type II HIPAA PCI DSS and GDPR with awareness of emerging
AI governance requirements such as the EU AI Act and ISO/IEC 42001 considered an advantage. The role involves
maintaining compliance documentation and internal controls supporting internal and external audits reviewing
departmental Standard Operating Procedures (SOPs) identifying compliance gaps coordinating corrective actions
and working with cross-functional teams to strengthen organizational compliance.
Key Responsibilities
Support the development implementation and maintenance of compliance programs and controls covering
ISO/IEC 27001:2022 SOC 2 Type II HIPAA PCI DSS GDPR and other applicable requirements.
Create review organize and maintain policies procedures SOPs standards control records and audit-ready
evidence.
Assist with periodic internal compliance reviews control testing risk assessments gap identification and
remediation planning.
Coordinate evidence collection documentation auditor requests and follow-up activities for internal and
external audits and assessments.
Record audit findings maintain action trackers follow up with control owners and verify completion of corrective
and preventive actions.
Plan and assist with SOP reviews across IT HR Operations Finance Sales Marketing and other
departments; Audit and check that documented processes are accurate current and followed.
Help teams draft revise standardize and implement SOPs; document gaps inefficiencies and opportunities for
process improvement.
Prepare clear audit summaries compliance status reports risk observations and written recommendations for
relevant stakeholders.
Collaborate with department heads and cross-functional teams to gather requirements maintain documentation
and communicate findings and progress.
Assist with compliance awareness and training initiatives and ongoing monitoring of internal policies standards
and regulatory requirements.
Use or learn GRC platforms such as Drata Vanta or equivalent tools to maintain control evidence tasks and
compliance records.
Must-have Skills
Foundational understanding of information security compliance internal controls risk management and audit
processes.
Working knowledge of ISO 27001 and familiarity with frameworks such as SOC 2 Type II HIPAA PCI DSS or
GDPR.
Ability to draft and review SOPs policies audit reports checklists and compliance evidence with strong
attention to detail.

Ability to identify gaps track remediation items and coordinate deliverables across multiple departments.
Strong written and verbal communication analytical thinking organizational skills and proficiency in MS Office.
Good-to-have Skills
Hands-on experience with Drata Vanta or another governance risk and compliance (GRC) tool.
Exposure to ISO 27001 SOC 2 HIPAA PCI DSS or GDPR audit preparation evidence collection or control
implementation.
Awareness of the EU AI Act ISO/IEC 42001 and other AI governance or regulatory frameworks.
Basic understanding of IT infrastructure databases networking and data-protection practices.
Qualifications & Experience
12 years of experience in compliance information security governance internal audit risk management SOP
auditing or a closely related area.
Bachelors degree in IT Information Security Business Law or a relevant discipline preferred.
Relevant certifications or training in information security auditing ISO 27001 or compliance are an advantage
not mandatory.