Compliance Analyst

Google Chrome Microsoft Edge Apple Safari Mozilla Firefox Compliance AnalystFull-timeTime Type: Full TimeDepartment: Information TechnologyLocation: India - Mumbai - Adjunct OfficeCompany DescriptionQAD is building a world-class SaaS company, and we are growing. We are looking for talented individuals who want to join us on our mission to help solve relevant real-world problems in manufacturing and the supply chain.We are a virtual first company and your primary work experience will be virtual / working from your home.  Occasional travel to a physical office may be required to enhance working relationships, collaboration, design, strategy and alignment.    Job DescriptionThe Senior Process and Compliance Analyst will Manage process & compliance activities to implement and maintain industry best compliance and security frameworks like ISO, CSA, SSAE18 SOC, NIST, FDA, NIS, TISAX etc. Focus is to drive consistency across QAD in maintaining compliance controls and in maintaining applicable regulatory compliance requirements in the areas of Information Security, Service Management, Risk Management, Business Continuity Management, Privacy Management, Quality Management System, etc.      Performs gap analysis for compliance standards upgrades and guides functional teams in implementing required controls, and in updating policy and procedures.Conducts internal compliance audits and demonstrates controls during external compliance assessments.Note: The role requires the person to work in between 11 am to 11 pm (any 9 hour shift) Responsibilities:Compliance Management:Manages and conducts internal process and security compliance auditsManages and participates in external compliance audits and presents evidence and controlsManages customer audit requests and coordinates with the global teams in gathering and presenting evidenceDocuments audit observations/findings and follows-up with the impacted parties for closure of the audit findingsPerforms gap analysis for certification upgrades and implements updatesKeeps track of changes to regulatory requirementsProcess/Policy Management:Ensures that process and policy documents meet the compliance control requirements Works with respective business teams to implement missing controls, and assist the teams to update policy/process documentsMaintains compliance related registers like Risk, Continuous Improvements, etc.Delivers training as required to the global teams on various compliance frameworksAssists business functions in performing business impact analysis and in maintaining business continuity plansSecurity/Quality/Risk assessment Questionnaires response:Works with the global business functions in responding to third party questionnairesContinuous Learning:Proactively develops skill and knowledge on security and compliance standards and frameworksStays attuned to changes in industry compliance and regulatory requirementsQualificationsEducation/Certification:  Bachelor in Engineering, Computer Science, IT, ISO 27001, ISO 20000 Lead Auditor Certifications are preferred (or achieved within 12 months)Experience: 5+ years of Industry Experience that includes Compliance, Service and Security Managements, Cybersecurity best practice, etc.Familiarity with industry leading compliance frameworks (e.g. CSA STAR, SSAE18 SOC 1 / SOC 2, ISO 27001, ISO 20000, ISO 9001, FDA, NIST, NIS 2, TISAX, etc.) Exposure to compliance audit processProcess training deliveryComputer skills: Knowledge of System/Network security and business operationsKnowledge on Project Management methodology, training material preparation and spreadsheets are preferredGood business procedure writing skillOther knowledge or skills: : Analytical and Problem Solving abilityCustomer service skills and proven ability to perform in fast-paced environmentGood communication skills and ability to handle sensitive matters with tact and diplomacyAble to work independentlyCapable of exercising judgment and discretion while...