Senior Security Compliance Analyst

Overview Join to apply for the Senior Security Compliance Analyst role at TaskUs What can you expect in a Senior Security Compliance Analyst role with TaskUs: Think of yourself as someone who is responsible for security system assessments, monitoring, and reporting. You will have a significant role in performing audits, tracking vulnerability assessments, security testing, and working with operations teams on remediation and mitigation of audit findings. Imagine yourself going to work with one thing on your mind: that you will lead the assessment and integration of security controls of the entire corporate environment in line with applicable requirements from PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001. Responsible for policy assessment of endpoint and network security appliances, hardware, and software, enforcing the TaskUs security policies, and complying with requirements of internal and external security audits and recommendations. Key Responsibilities Ensuring Alignment of Security Controls to Client requirements Good knowledge of Data Governance Support the Security Compliance Manager in handling the assessment and integration of security controls of the entire corporate environment in line with customer requirements Support the management of all enterprise security compliance requirements, including PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 Lead the development and maintenance of IT and Cyber Security Risk Assessment procedures and processes, and work with business units outside of InfoSec to complete the Risk Assessment with the tracking of Risk Treatment Recommend and support deployment and use of additional security products and tools for performing the Risk Assessments and the Vendor Security Assessments Collaborate with security engineers for the optimal configuration of the network and host-based security platforms aligned with compliance requirements Recommend and support deployment of additional security products and tools, or enhancements to existing tools, to mitigate security risk and detect/remediate compromises Work with security engineers for the optimal configuration of network and host-based security platforms in line with compliance requirements Provide Incident Response support as needed in response to information security-related events, including analysis, troubleshooting, and investigation of security-related anomalies Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations Perform other duties as assigned as part of the security compliance activities and serve as a backup for teammates Required Qualifications In-depth and hands-on experience with PCI DSS, SOC 2, HIPAA/HITRUST, and ISO 27001 At least 4 years of experience in IT/IS Security Compliance/Consulting focusing on IT security, IT audit, Risk Assessments, Vendor Security Assessment, and/or due diligence reviews Candid industry-recognized presentation skills with the ability to prepare reports and presentations Industry-recognized information security certification (e.g., CISA, CISSP, CISM, ISO 31000, Certified Third-Party Risk Professional) Strong technical writing, documentation, and communication skills Functional awareness of information system platforms with strong IT technical understanding and analytical problem-solving Strong understanding of third-party, enterprise, network, system and application-level risk and controls Ability to handle sensitive and/or confidential material with discretion Excellent interpersonal skills and a professional demeanor BOI contact center experience preferred, but not required Education / Certifications Bachelor’s degree in MIS/Computer Science or Business, or a combination of education and relevant experience Work Location / Schedule / Travel TaskUs Ortigas, Quezon City, Las Piñas, and Antipolo Work-from-Home (Onsite as needed) Day Shift (Philippine Time) About TaskUs TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in sectors including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech. TaskUs People First culture has grown the company to have approximately 45K employees worldwide. We are currently in twenty-three locations across twelve countries, including the Philippines, India, and the United States. It started with one idea to create a different breed of BPO. We understand that growth requires a culture of constant motion, exploring new technologies, handling challenges, and mastering consistency in an ever-changing world. What We Offer TaskUs provides world-class benefit packages with competitive salaries. With departments such as Total Rewards, Wellness, HR, and Diversity, we support a People First culture. We promote internal mobility and professional development. Apply today to be part of TaskUs. How We Partner To Protect You TaskUs will neither solicit money from you during the application process nor require any form of payment. Communicate only with authorized TaskUs recruiters. DEI We believe innovation and high performance come from people of all backgrounds. Inclusive and equitable practices are our responsibility. TaskUs provides equal access to opportunities. If you need reasonable accommodations in the hiring process, please let us know. We invite you to explore all TaskUs career opportunities and apply through the provided URL . Seniority level Mid-Senior level Employment type Full-time Job function Information Technology Industries: Outsourcing and Offshoring Consulting We also provide additional related content on related roles as part of our job postings. #J-18808-Ljbffr