Synchronoss Technologies Hiring for Compliance Analyst at Bangalore, India Full Time

At Synchronoss We Transform & Digitize Telecommunications, Media & Technology (TMT) Companies.

We know the TMT space. Our platforms, products, people, and partners help Telecommunications, Media, and Technology companies shift their digital business into high gear. We are helping companies create digital customer journeys that reduce cost, improve consumer satisfaction, and create new revenue.

General Role Description

The Compliance Analyst assists with major IT security & compliance certification programs for Synchronoss Global Information Security (GIS). The role will focus initially on PCI DSS v3.2.1, with opportunity to support other standards in the future, such as ISO, SOC, and SOX. The role partners with business and IT leaders across lines of business and functional areas to define appropriate certification requirements, and oversees execution of audit, assessment, and testing activities to achieve and maintain compliance.

The Compliance Analyst is expected to develop and maintain a working expertise of evolving industry and regulatory PCI compliance requirements, enabling Synchronoss to maintain a competitive advantage in the marketplace by sustaining PCI Service Provider certification. In addition, the role will lead the execution of high-value and cost effective quarterly and annual audits.

Specific Job Responsibilities

• Oversee execution of required PCI audits across multiple product platforms.

• Collaborate with business and IT Subject Matter Experts to identify PCI DSS controls that are applicable to SNCR products.

• Identify supporting evidence and develop testing strategies for in-scope DSS controls.

• Provide direct oversight of third-party PCI QSA audit partners, ensuring successful audit completion and certifications.

• Guide internal stakeholders to fully understand control requirements and to prepare for audit and testing activities.

• Develop strategies for effective and efficient evidence gathering, storing and delivery to auditors.

• Actively manage auditor requests and act as liaison between auditors and internal stakeholders.

• Drive appropriate follow-up to certification results, providing remediation advice and leading implementation of appropriate remediation activities.

• Provide guidance to identifying appropriate technical and process solutions to meet evolving compliance and security requirements.

• Perform quarterly Control Reviews, as required by PCI, to ensure key controls are operating as intended. Suggest control improvements where possible.

• Assist with internal control self-assessments as needed, concentrating on IT Internal Controls, Information Security and Business Continuity / Disaster Recovery.

• Develop self-assessment timeline, audit work program as well as execute control review and testing. Author final report detailing testing results and management action plans.

• Assist with the buildout of the Business Continuity and Disaster Recovery Program across all products and services.

Position Requirements

• 2+ years of experience with risk management or auditing practices that include testing of controls, and substantive testing of transactions.

• Background in the IT industry, preferably with Information Security, Software Development or Business Continuity / Disaster Recovery.

• Familiarity with PCI certification auditing using PCI DSS v3.2, including strong understanding of assessment process, compliance requirements, and controls applied to both business processes and IT systems.

• Working knowledge of technologies and solutions offered by industry for related process and technical controls.

• Hands-on experience in risk management and/or auditing desired; CISA, CISSP, CIA, or related certifications are a plus.

• Excellent verbal and written communication and presentation skills. Must have the ability to communicate effectively with auditors, suppliers, internal stakeholders, and management in both formal and informal situations.

Synchronoss is proud to be an Equal Opportunity Employer. As a global company, we value and celebrate diversity and are committed to a workplace free from discrimination and harassment. We take pride in fostering an inclusive environment based on mutual respect and merit. We are at our best when our workforce is dynamic in thought, experience, skill set, race, age, gender, sexual orientation, sexual expression, national origin and beyond.

External Company Name: Synchronoss Technologies

External Company URL: Synchronoss.com

Post End Date: 3/30/2022

iCIMS ID: 2022-5178