Compliance Analyst

• Role: Compliance Analyst
• Exp: 1-2 Years
• Work Mode: Mohali, WOrk form Office
• Time: 10am - 8pm IST

Role Summary

• RChilli is seeking a Compliance Analyst to support its IT compliance and governance activities. The role focuses on
• maintaining compliance documentation, supporting internal and external audits, reviewing departmental Standard
• Operating Procedures (SOPs), monitoring controls, identifying gaps, and coordinating timely corrective actions
• across teams.

Key Responsibilities

•  Support the development, implementation, and maintenance of compliance programs and controls covering
• ISO/IEC 27001:2022, SOC 2 Type II, HIPAA, PCI DSS, GDPR, and other applicable requirements.
•  Create, review, organize, and maintain policies, procedures, SOPs, standards, control records, and audit-ready
• evidence.
•  Assist with periodic internal compliance reviews, control testing, risk assessments, gap identification, and
• remediation planning.
•  Coordinate evidence collection, documentation, auditor requests, and follow-up activities for internal and
• external audits and assessments.
•  Record audit findings, maintain action trackers, follow up with control owners, and verify completion of corrective
• and preventive actions.
•  Plan and assist with SOP reviews across IT, HR, Operations, Finance, Sales, Marketing, and other
• departments; Audit and check that documented processes are accurate, current, and followed.
•  Help teams draft, revise, standardize, and implement SOPs; document gaps, inefficiencies, and opportunities for
• process improvement.
•  Prepare clear audit summaries, compliance status reports, risk observations, and written recommendations for
• relevant stakeholders.
•  Collaborate with department heads and cross-functional teams to gather requirements, maintain documentation,
• and communicate findings and progress.
•  Assist with compliance awareness and training initiatives and ongoing monitoring of internal policies, standards,
• and regulatory requirements.
•  Use or learn GRC platforms such as Drata, Vanta, or equivalent tools to maintain control evidence, tasks, and
• compliance records.

Must-have Skills

•  Foundational understanding of information security compliance, internal controls, risk management, and audit
• processes.
•  Working knowledge of ISO 27001 and familiarity with frameworks such as SOC 2 Type II, HIPAA, PCI DSS, or
• GDPR.
•  Ability to draft and review SOPs, policies, audit reports, checklists, and compliance evidence with strong
• attention to detail.
•  Ability to identify gaps, track remediation items, and coordinate deliverables across multiple departments.
•  Strong written and verbal communication, analytical thinking, organizational skills, and proficiency in MS Office.