Compliance Analyst (Hybrid)

Job Title

Compliance Analyst (Hybrid)

Job Description

The Compliance Analyst will be responsible for the implementation, maintenance and operation of the IEC/ISO 27001 standard along with Cyber Essentials and PCI DSS certifications. You will also play a key role in ensure SOX compliance. You will ensure that the organization's IT systems and processes adhere to regulatory requirements, industry standards, and internal policies. This role involves conducting audits, assessments, and training to maintain compliance and mitigate risks.

Candidate Profile
You will be an experienced and highly skilled individual, able to work efficiently, without guidance or supervision. Your stakeholder skills and interpersonal skills will enable you to develop positive relationships across the business.

Duties & Responsibilities

• Develop and enhance Kaplan’s practices and processes to ensure security considerations are implemented in line with the ISO 27001 standard alongside other relevant frameworks.
• Assist in the development, implementation and communication of policies in conjunction with the Compliance Manager and Head of Information Security and Compliance.
• Assist with the internal auditing against the ISO 27001 standard for Kaplan International.
• Ensure compliance to SOX requirements and provide relevant information for audits.
• Experience delivering and continually reviewing IT Service Management processes and reporting; including but not limited to problem management, change management and asset management.
• Assist with the implementation of the Business Continuity and Disaster Recovery processes, working with the Compliance Manager to conduct testing when required.
• Working to ensure the business impact assessments (BIA) and sensitive data inventory (SDI) are managed and kept up to date.
• Respond to client tender information request documents and assist the client audit process and make sure the relevant audits are reviewed, communicated, and actioned on time.
• Respond to internal & external questions and queries in relation to the Kaplan’s information security control and governance framework.
• Provide information security-related advice and guidance to the business on areas such as compliance and regulation.
• Participate in regional and global security and compliance meetings as appropriate.
• Assist the Compliance Manager in maintaining the KI information security risk register.
• Assist with security awareness training to the business in the form of newsletters, awareness campaigns and staff training.
• Stay updated with changes in regulations and standards that impact IT compliance.

Required Experience, Skills, and Attributes

• Good Knowledge of the audit process used within the IT sector.
• SOX controls and auditing
• Good Knowledge and experience of providing an IEC/ISO 27001 ISMS, Cyber Essentials and PCI Framework.
• Understanding of data handling best-practices and information management and governance.
• Ability to stay current with cyber attacker techniques, phishing schemes, emerging threats, breaches, vulnerability, and governance news.
• Actively contribute to security initiatives to increase employee awareness.
• Assist in reviewing and redesigning internal processes and systems to ensure information confidentiality, integrity, and availability.

Personal Skills / Attributes

• Advanced written and oral communication skills.
• Highly motivated, proactive, and outcome orientated.
• Ability to work closely with other key stakeholders outside of the IT department.
• Great stakeholder management ability to influence internal and external stakeholders.
• Ability to effectively prioritise and execute tasks in a high-pressure environment.
• Extensive experience working in a team-oriented collaborative environment.
• Keen attention to detail.
• Smart and professional manner.
• ISO 27001:2022 Lead Implementor/Auditor.
• Advanced written and oral communication skills

Beyond base salary, our comprehensive total rewards package includes:

Hybrid work model provides a flexible work/life balance
Voluntary Provident Fund is an additional voluntary contribution scheme associated with the statutory Employee Provident Fund (EPF)
Our Gift of Knowledge Program provides tuition assistance and substantial discounts for our employees and close family members
Comprehensive health benefits new hire eligibility starts on day 1 of employment
Generous Paid Time Off includes National holidays(10), Earned leaves(15), sick leave(12), plus one (1) volunteer day to participate and give back to our local communities
Gratuity is applicable upon completion of 5 years as per the Gratuity Act

We are committed to providing a supportive and rewarding work environment where every employee can thrive. You can learn more about our full benefits package and total rewards philosophy here.

Location

Bangalore, KA, India

Additional Locations

Employee Type

Employee

Job Functional Area

Compliance

Business Unit

00092 Kaplan Health

Diversity & Inclusion Statement:

Kaplan is committed to cultivating an inclusive workplace that values diversity, promotes equity, and integrates inclusivity into all aspects of our operations. We are an equal opportunity employer and all qualified applicants will receive consideration for employment regardless of age, race, creed, color, national origin, ancestry, marital status, sexual orientation, gender identity or expression, disability, veteran status, nationality, or sex. We believe that diversity strengthens our organization, fuels innovation, and improves our ability to serve our students, customers, and communities. Learn more about our culture here.

Kaplan considers qualified applicants for employment even if applicants have an arrest or conviction in their background check records. Kaplan complies with related background check regulations, including but not limited to, the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.  There are various positions where certain convictions may disqualify applicants, such as those positions requiring interaction with minors, financial records, or other sensitive and/or confidential information.