Job Description :

Our client is an AI-driven healthcare technology company transforming cardiovascular care through advanced AI and medical innovation.

We are looking for a Security & Compliance Analyst to help strengthen and maintain the organization's information security, risk management, and compliance programs.

Key Responsibilities :

- Support and maintain the Information Security Management System (ISMS).

- Ensure compliance with ISO 27001, ISO 27002, and other relevant security standards.

- Coordinate internal and external security audits and certification activities.

- Conduct risk assessments and track remediation efforts.

- Manage third-party/vendor security and compliance assessments.

- Support privacy and data protection initiatives, including GDPR and related regulations.

- Develop, review, and maintain security policies, procedures, and compliance documentation.

- Collaborate with HR, Legal, Engineering, IT, and other stakeholders to promote security best practices.

- Track security metrics, compliance activities, and audit findings.

Required Skills :

- Strong understanding of Information Security, Governance, Risk & Compliance (GRC).

- Experience with ISO 27001, ISMS, security audits, and compliance programs.

- Knowledge of risk assessment methodologies and security controls.

- Familiarity with privacy regulations such as GDPR and CCPA.

- Experience conducting vendor or third-party risk assessments.

- Excellent analytical, communication, and stakeholder management skills.

Qualifications :

- Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.

- 2+ years of experience in Information Security, Compliance, Risk Management, or GRC-related roles.

Preferred :

- Certifications such as CISSP, CISM, CRISC, CCSK, ISO 27001 Lead Auditor, or ISO 27001 Lead Implementer.

- Experience working in Healthcare, Medical Device, HealthTech, SaaS, or other regulated industries.

- Familiarity with NIST, HITRUST, or similar security frameworks