# Senior Security & Compliance Analyst

**Company**: Energy Exemplar
**Location**: Pune, Maharashtra
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/energyexemplarllc/jobs/5283811008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ad5efd92-022

## Description

In an era where the world is rapidly advancing towards a cleaner future through decarbonization, Energy Exemplar's mission lies in 'Empowering Transformative Energy Decisions'.

The Senior Security & Compliance Analyst will support the execution and continuous improvement of Energy Exemplar's security, risk, compliance, vulnerability management, and AI governance programs across cloud and enterprise operations.

Responsibilities:

- Support security and compliance programs aligned with ISO 27001, SOC 1, SOC 2, privacy, and emerging AI governance requirements.

- Coordinate and drive vulnerability remediation activities across Engineering, Cloud Operations, IT, and Product teams to ensure remediation within defined EE SLAs.

- Track and report security metrics, including MTTR, overdue vulnerabilities, remediation trends, audit findings, and compliance dashboards.

- Proactively follow up and escalate unresolved vulnerabilities, audit findings, and compliance gaps.

- Support continuous control monitoring, risk assessments, third-party risk management, policy management, access reviews, and audit activities.

- Respond to customer security and compliance due diligence requests, audits, and questionnaires.

- Support AI governance, security, and compliance initiatives, including assessment of AI-related risks, emerging regulations, and industry standards (e.g., ISO 42001, EU AI Act, privacy requirements).

- Assist in evaluating AI-enabled solutions and third-party AI services for security, privacy, compliance, and responsible AI considerations.

- Monitor emerging cybersecurity threats, privacy regulations, and industry compliance requirements.

- Collaborate with cross-functional teams to drive remediation and continuous improvement initiatives.

Qualifications:

- 6–8 years of experience in Governance, Risk & Compliance (GRC), cybersecurity, information security, or risk management.

- Strong understanding of ISO 27001, SOC 1 / SOC 2, GDPR/privacy principles, vulnerability management, and security controls.

- Experience in Energy / Utilities sector security and compliance requirements (e.g., CEII or critical infrastructure requirements)

- Experience coordinating vulnerability remediation programs, tracking SLA compliance, MTTR metrics, and executive reporting.

- Experience supporting audits, customer security reviews, and compliance programs.

- Familiarity with emerging AI governance, privacy, and security frameworks (e.g., ISO 42001, EU AI Act, responsible AI principles) preferred.

- Strong communication, organizational, stakeholder management, and follow-up skills.

- Ability to work independently and proactively drive outcomes across distributed teams.

Preferred Certifications:

- CISSP, CISA, ISO 27001 Lead Implementer/Auditor, or similar certifications.

- AI governance/privacy certifications are a plus.

## Skills

### Required
- ISO 27001
- SOC 1
- SOC 2
- GDPR
- Vulnerability management
- Security controls
- GRC
- Cybersecurity
- Information security
- Risk management

### Nice to have
- ISO 42001
- EU AI Act
- Responsible AI principles
- AI governance
- Privacy certifications
- CISSP
- CISA
- ISO 27001 Lead Implementer/Auditor

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/energyexemplarllc/jobs/5283811008?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)