IT Compliance & Controls Analyst II

Overview

The IT Compliance/Controls Analyst II is a role within the Global Information Security (GIS) department that advances IT governance and manages organizational risk, ensuring the implementation and operational effectiveness of critical IT controls.

What you'll do

• Maintain expert knowledge of the company's IT infrastructure, applications, and governance standards.
• Execute control assessments to verify the adequacy of internal controls and adherence to corporate policies.
• Conduct comprehensive security risk assessments to preemptively address audit findings and reduce risk.
• Evaluate security risks associated with AI/ML deployments and emerging frontier model technologies.
• Lead forward-looking AI-driven risk initiatives to ensure continuous alignment with regulatory advancements.
• Design and implement Python-based control automation pipelines, integrating with enterprise APIs (Archer GRC, CyberArk, AD, HashiCorp Vault) for programmatic evidence validation.
• Ensure strict compliance with regulatory obligations, including CFTC, Fedline, and SWIFT CSP frameworks.
• Produce detailed, logical work-papers documenting testing procedures, results, and expert conclusions.
• Streamline control testing and risk processes utilizing automation and AI tools (e.g., Python, Gemini).
• Foster collaborative relationships with stakeholders to enhance the efficiency of the controls testing program.
• Test internal technology controls in alignment with global regulatory requirements.
• Develop and recommend strategic remediation plans for identified control gaps.
• Identify opportunities for automation within IT control and risk assessment workflows.
• Provide regular status reporting and assist in the development of performance metrics for senior leadership.
• Partner with senior team members to advise management on strengthening controls and mitigating risks.
• Assess existing controls against evolving industry best practices and legal obligations.
• Execute standard lifecycle security risk assessments across diverse technical domains.
• Proactively identify and mitigate risks associated with emerging AI/ML technologies and frontier models.
• Support the establishment and refinement of compliance frameworks for AI applications.
• Maintain strict alignment with global regulatory standards in all remediation and testing activities.
• Collaborate with IT Control Owners, Corporate Compliance, Business Process Owners and Global Assurance (Internal Audit) on supporting and establishing new approaches or changes in existing processes around documented requirements for mitigation of associated risks.

What you'll need

• Bachelor's degree in Computer Science, Information Systems, Finance, or a related technical field.
• 2+ years of experience in IT audit, risk advisory, or information security within a financial or professional services firm.
• Experience in technical aspects of IT Risk Management, Information Security, Technical Privacy, and/or IT Audits.
• Working knowledge in technologies and environments leveraging operational knowledge of Information Security best practices and industry standards to define the security controls and processes.
• Experience as an Information Security analyst in a professional services firm or large enterprise, including interfacing with key control stakeholders and participating in the planning and execution of projects in one or more of: Information Security, Risk Management, Technical Compliance, IT Security Audit, Remediation, and/or IT Risk Management; or experience in one or more Technology areas like Information Security, Software Development, IT Architecture, RPA, Data Analytics, etc. with a willingness to move to an IT audit role.
• Proficiency in Python-based automation for continuous control monitoring and data analysis.
• Ability to recommend and implement automation solutions to enhance efficiency and effectiveness of compliance controls.
• Ability to participate in key team discussions and meetings; preparing concise, accurate documents and balancing project deadlines with unanticipated issues.
• Strong written and verbal communication and presentation skills, and ability to work with diverse teams.
• Demonstrate thorough abilities as a team player, creating a positive environment while meeting project expectations, respecting team members' work-life quality, providing candid, meaningful feedback in a timely manner, and keeping leadership informed of progress and issues.
• Interfacing with key stakeholders on control solutions.
• Proficient usage of Governance, Risk and Compliance (GRC) and Audit tools.

Nice to have

• Professional certification (CISA, CISSP, CRISC, or ISO 27001).
• Familiarity with AI governance frameworks (e.g., ISO 42001, EU AI Act) and best practices.
• Knowledge of industry frameworks such as NIST, COBIT, CFTC, and SOC2.
• Experience working with CAATs/data analytics tools and technologies such as Cloud, DevOps, Microservices, etc.

Details

• Location: Bangalore - Bagmane Tridib.