Senior Security Compliance Analyst

About TaskUs TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech. The People First culture at TaskUs has enabled the company to expand its workforce to approximately 45,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States. It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO). We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world. What We Offer TaskUs prioritizes our employees\' well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We promote an inclusive environment and opportunities for internal mobility and professional growth at all stages of an employee\'s career within TaskUs. Join our team today and experience our dedication to supporting People First. Senior Security Compliance Analyst Role overview Think of yourself as someone responsible for security system assessments, monitoring, and reporting. You will play a significant role in audits, tracking vulnerability assessments, security testing, and coordinating with operations teams on remediation and mitigation of audit findings. You will lead the assessment and integration of security controls for the entire corporate environment in line with PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001. You will be responsible for policy assessment of endpoint and network security appliances, hardware, and software, enforcing TaskUs security policies, and complying with internal and external audits. Key Responsibilities Ensuring alignment of security controls to client requirements Good knowledge of Data Governance Support the Security Compliance Manager in assessment and integration of security controls across the corporate environment in line with customer requirements Manage enterprise security compliance requirements, including PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 Lead the development and maintenance of IT and Cyber Security Risk Assessment procedures and processes; collaborate with business units to complete risk assessments and track risk treatment Recommend and support deployment of security products/tools for risk assessments and vendor security assessments Work with security engineers for optimal configuration of network and host-based security platforms aligned with compliance requirements Provide incident response support as needed; participate in analysis, troubleshooting, and investigation of security-related anomalies Evaluate systems using vulnerability scanners and manual techniques to verify security settings Perform other duties as assigned as part of security compliance activities and act as a backup as required Required Qualifications In-depth hands-on experience with PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 At least 4 years of experience in IT/IS Security, compliance, auditing, risk assessments, or related areas Strong presentation skills with ability to prepare reports Industry-recognized information security certification (e.g., CISA, CISM, CISSP, ISO 27001 Lead/LI, Certified Third-Party Risk Professional) Technical writing, documentation, and communication skills Functional awareness of information systems with strong IT technical aptitude Strong understanding of third-party, enterprise, network, system and application risk and controls Ability to handle sensitive information with discretion Excellent interpersonal skills and professional demeanor BPO contact center experience is preferred but not required Education / Certifications Bachelor’s degree in MIS/Computer Science or Business, or a combination of education and relevant experience Work Location / Work Schedule / Travel TaskUs Ortigas, Quezon City, Las Piñas, and Antipolo Work-from-Home (Onsite as needed) Day Shift (Philippine Time) DEI: TaskUs believes that innovation and high performance come from people from all walks of life. We welcome applicants of diverse backgrounds and circumstances and are committed to inclusive and equitable practices. If you need accommodations in the hiring process, please let us know. Explore all TaskUs career opportunities and apply through the provided URL: #J-18808-Ljbffr