Security & Compliance Analyst - Healthcare/Medical Devices/SaMD

Security & Compliance Analyst

Location - Bangalore

Job Summary

We are looking for a proactive and detail-oriented Security & Compliance Analyst to drive and strengthen our information security, privacy, and compliance programs. In this role, you will support the organization's Information Security Management System (ISMS), ensure compliance with industry standards, and collaborate with cross-functional teams to manage risk, audits, and regulatory requirements.

Key Responsibilities

- Maintain and improve the ISMS in alignment with ISO 27001, ISO 27002, and ISO 13485.

- Conduct internal audits, manage audit evidence, and support external certification audits.

- Perform security risk assessments and track remediation activities.

- Manage third-party/vendor security assessments and compliance reviews.

- Ensure compliance with privacy regulations such as GDPR and CCPA.

- Develop and maintain security policies, procedures, and compliance documentation.

- Partner with HR, Legal, IT, Engineering, and Quality teams to promote security best practices.

- Track security metrics and support continuous improvement initiatives.

Requirements

- Bachelor's degree in Information Security, Computer Science, IT, Risk Management, or a related field.

- 2+ years of experience in Information Security, Compliance, Risk Management, or Governance.

- Strong knowledge of ISO 27001, ISO 27002, GDPR, CCPA, and security frameworks such as NIST or HITRUST.

- Excellent analytical, communication, and stakeholder management skills.

Preferred

- Certifications such as CISSP, CISM, CRISC, CCSK, or ISO 27001 Lead Auditor/Implementer.

- Experience in healthcare, medical devices, or SaMD environments.

- Exposure to vulnerability management, secure SDLC, and DevSecOps practices.

Why Join Us?

- Work on cutting-edge technology with real-world impact.

- High ownership, autonomy, and learning opportunities.

- Clear career growth path in a fast-growing organization.

- Competitive compensation and comprehensive health insurance.