Security Compliance Analyst (4+ years of exp in Sox 1 + Sox 2 + Regulatory & Cybersecurity Compliance + CISM)

Cyber Security Analyst, Assurant, GCC-India

The Cyber Security Analyst is responsible for supporting, defending and enhancing Assurant’s cybersecurity posture through the implementation and maintenance of security technologies, incident management and mitigation, compliance frameworks, identity and access management (IAM), and audit readiness. This role ensures alignment with regulatory requirements, internal policies, and industry best practices while proactively identifying and mitigating risks across the enterprise.

This position will be in Hyderabad at our India location.

Work Timing = 3:00 PM IST to 12:00 AM IST

What will be my duties and responsibilities in this job?

• Governance, Compliance & Audit Support - Ensure adherence to regulatory frameworks (e.g., PCI-DSS, NY DFS, GLBA, SOX, DORA, etc.). Support internal and external audits, including vendor and client assessments. Maintain documentation and evidence for compliance activities. Collaborate with Legal, Privacy, Risk, Global Technology and other Cybersecurity teams. Ensure timely and effective cybersecurity education and awareness

• Technology & Security Systems Management - Administer and monitor cybersecurity tools and platforms (e.g., SIEM, endpoint protection, vulnerability scanners). Respond to security incidents and alerts. Perform root cause analysis and recommend remediation.

• Security Operations – Conduct threat monitoring and analysis via multi-telemetry-based alerts, triage, develop and deliver formal incident reports, and work with technology teams on remediation and improvements.

• Identity and Access Management (IAM) - Manage user access provisioning, de-provisioning, and role-based access controls. Ensure compliance with least privilege and segregation of duties principles. Support IAM audits and reviews.

• Project Support & Risk Assessment - Participate in security-related projects and initiatives. Conduct risk assessments for new technologies and vendors. Provide security, architecture and design.

• Reporting & Metrics - Develop and maintain dashboards and reports on security posture, compliance status, project/task status and audit findings. Present findings to leadership and stakeholders

What are the requirements needed for this position?

• Education: Bachelor’s degree preferred; in Computer Science, Information Security, or a related field; or two-year technical certification in Information Systems, Business Management, Computer Science, Engineering, Audit or related.  
• Experience: Minimum 4 years in IT Security, Compliance, Audit, or IAM roles

Knowledge & Skills

• Strong understanding of cybersecurity frameworks and regulatory requirements
• Experience with IAM tools and processes
• Familiarity with audit procedures and evidence collection
• Proficiency in security technologies (e.g., firewalls, SIEM, endpoint protection)
• Excellent communication and documentation abilities - using appropriate level of communication up and down the organization 
• Works to gain a deep understanding of requests or tasks and offers suggestions to streamline
• Build and maintain strong working relationships with sponsors, stakeholders, and team members 
• Strong problem-solving, critical thinking and troubleshooting skills 
• Ability to effectively influence others to modify their opinions, plans or behaviors 
• Effectively work independently and collaboratively in a virtual team environment
• Persistent in completing the tasks - on time and within the deadline 
• Spends time on what adds the most value 
• Engage the right people at the right time 
• Bring grit and determination to get things done

What are the other requirements needed for this position?

• Active security certification desired or willingness to obtain
• CompTIA Security+  
• GIAC Security Essentials  
• Certified Security Analyst (ECSA)  
• Certified Ethical Hacker (CEH)  
• Certified Red Team Operator (CRTO) 
• Offensive Security Certified Professional (OSCP)  
• Certificated Information Systems Security Professional (CISSP)  
• Experience in financial services or insurance industries
• Knowledge of cloud security and modern IAM solutions
• Experience with GRC platforms and risk management methodologies