security and compliance analyst

Zones IT Solutions

<div>
 <strong>
  Description
  <br/>
  <br/>
 </strong>
 Company Overview:
 <br/>
 <br/>
 When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there&rsquo;s really only one: Zones &ndash; First Choice for IT.TM
 <br/>
 <br/>
 Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud &amp; Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done. Follow Zones, LLC on Twitter @Zones, and LinkedIn and Facebook.
 <br/>
 <br/>
 <strong>
  Position Overview
  <br/>
  <br/>
 </strong>
 As the Information Security Analyst - Compliance &amp; Risk Management, you will analyze management and technical controls to ensure compliance with security requirements. This includes mapping regulatory and security requirements across the information security framework and tracking enterprise compliance across multiple security frameworks. You will also assist internal teams in preparing for internal and external assessments and audits, collaborate on critical IT projects to address security policy and risk issues, and develop key performance metrics to track and ensure compliance with policies and standards.
 <br/>
 <br/>
 What you&rsquo;ll do as the Information Security Analyst &ndash; Compliance &amp; Risk Management:
 <br/>
 <br/>
 Employees employed in the role of Information Security Analyst &ndash; Compliance &amp; Risk Management shall be required to apply their independent minds and demonstrate intellectual abilities in their decision-making.
 <br/>
 <br/>
 The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
 <br/>
 <br/>
 <ul>
  <li>
   Analyze management and technical controls to ensure specific security and compliance requirements are met.
  </li>
  <li>
   Map regulatory/security requirements across the information security framework.
  </li>
  <li>
   Track enterprise compliance across multiple security frameworks including ISO27001, 27701, SOC2, GDPR, and PCI-DSS, maintaining up-to-date records of requirements and corresponding mitigating controls.
  </li>
  <li>
   Help internal teams with readiness for internal/external assessments/audits against industry standards and review programs/documentation for conformance.
  </li>
  <li>
   Collaborate on critical IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.
  </li>
  <li>
   Develop key performance metrics to track and ensure compliance with established policies and standards.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You Will Bring To The Team
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5-7 years of information security experience.
  </li>
  <li>
   Experience with ISO 27001, SOC 2, and PCI-DSS compliance.
  </li>
  <li>
   Strong communication skills (verbal and written).
  </li>
  <li>
   Ability to meet deadlines and work under pressure.
  </li>
  <li>
   Experience of working in US-based multinational organizations is a plus.
  </li>
  <li>
   Security certifications such as CISSP/CISA, ISO27001.
  </li>
  <li>
   Extensive experience with auditing vendors/service providers/partners for compliance with security.
  </li>
  <li>
   Experience of working extensively with the Engineering teams (system admin, network admin, security admin, application teams) to effectively communicate the compliance requirements
  </li>
  <li>
   Bachelor&rsquo;s degree in Computer Science or Information Technology.
   <br/>
   <br/>
  </li>
 </ul>
 Zones offers a comprehensive Benefits package
 <br/>
 <br/>
 At Zones, we are committed to fostering an inclusive and diverse workplace where every team member is valued and supported. We offer life insurance, optional health insurance, and retirement benefits in line with Company policy. Employees also enjoy additional perks such as the Voluntary Pension Scheme, EOBI, complimentary meals, and access to our in-house gym.
 <br/>
 <br/>
 We take pride in being an equal opportunity employer and remain dedicated to maintaining a workplace free from discrimination of any kind. If you are passionate about driving innovation in IT, sales, engineering, or operations, Zones provides a dynamic and collaborative environment to help you grow your career.
 <br/>
 <br/>
 All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability.
 <br/>
 <br/>
 Job timings: 08:00 PM to 05:00 AM (Pk time)
</div>


Information Security Analyst – Compliance & Risk Management

DICETEK LLC

<div><p><b>Job Description: IT Compliance Analyst</b></p><p><b>
Overview:</b></p><p>
Ensure the organization&rsquo;s IT systems, processes, and services comply with current and emerging standards, including information security, IT service management, and AI governance. Conduct compliance reviews, risk assessments, audits, and report KPIs to support continuous improvement and alignment with evolving regulatory and industry requirements.</p><p></p><p><b><br>
Key Responsibilities:</b></p><ul><li><b>Standard management
</b></li></ul><p>o Ensure IT systems and processes comply with standards such as ISO 27001, ISO 20000, ISR, PCI DSS, ITIL, and AI compliance requirements.</p><p>
o Document and periodically review IT and AI policies and procedures related to ISMS, ITSMS, and AI governance frameworks.</p><ul><li><b>Risk Management:
</b></li></ul><p>o Conduct IT risk assessments to identify potential security and service risks, and collaborate with process and system owners to define, implement, and monitor effective controls to mitigate these risks.</p><ul><li><b>Audit Management</b></li></ul><p>
o Identify non-compliance issues, prepare root cause analysis, and ensure timely development and implementation of remediation plans.</p><p>
o Participate and coordinate in all internal and external IT audits (ISMS, ITSMS, or other compliance audits).</p><ul><li><b>Training &amp; Awareness</b></li></ul><p>
o Develop and deliver training programs on information security and IT service management best practices, fostering a culture of compliance and ensuring employees understand their responsibilities in maintaining IT governance.</p><ul><li><b>Performance Monitoring &amp; Reporting</b></li></ul><p>
o Define, measure, and report IT compliance and control effectiveness metrics (KPIs) to management.</p><p>
o Develop dashboards and reports using Power BI or similar visualization tools to communicate compliance performance and trends.</p><ul><li><b>Process Controls &amp; Continuous Improvement</b></li></ul><p>
o Coordinate with process owners to ensure IT internal controls are implemented, maintained, and aligned with documented standards, and work with relevant stakeholders to remediate any deficiencies identified through monitoring or audit processes.</p><ul><li><b>GRC System Management</b></li></ul><p>
o Utilize GRC tools to automate audit findings tracking, remediation management, risk assessments, and policy lifecycle reviews.</p><p>
o Support integration of compliance processes into digital governance platforms.</p><p></p><p><b><br>
Required Skills &amp; Qualifications:</b></p><ul><li><b>
Educational Background:</b> Bachelor&rsquo;s degree in information technology, Computer Science, or a related field.</li><li><b>
Experience:</b> 5 years of experience in IT Governance, Risk management, or a similar role.</li><li><b>
Technical Knowledge:</b> Highly proficient IT skills in Word, Excel, PowerPoint, MS Visio, ITSM tools, Power BI, GRC tools and Familiarity with IT systems cybersecurity principles, and IT compliance frameworks.</li><li><b>
Communication Skills:</b> Excellent verbal and written communication for reporting, audit coordination and training purposes.</li><li><b>
Certifications (Preferred):</b> CISA, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor/Auditor, ITIL Foundation, or other relevant IT governance, risk, security, or compliance certifications.</li></ul><p></p><p><b><br>
Key Competencies:</b></p><ul><li>
Attention to detail and accuracy.</li><li>
Problem-solving and critical thinking.</li><li>
Ability to work independently and collaboratively.</li><li>
Strong organizational and time-management skills.</li></ul></div><p></p>

IT Compliance Analyst

MillerKnoll

<div><div>Why join us?</div><div><br>
Our purpose is to design for the good of humankind. It&rsquo;s the ideal we strive toward each day in everything we do. Being a part of MillerKnoll means being a part of something larger than your work team, or even your brand. We are redefining modern for the 21st century. And our success allows MillerKnoll to support causes that align with our values, so we can build a more sustainable, equitable, and beautiful future for everyone.</div><div></div><div>
GENERAL PURPOSE<br>
The HRIS Analyst will support the administration and compliance of Workday security, audit readiness, and HR data across MillerKnoll. This role will assist in maintaining secure and compliant HR systems, responding to internal requests, and supporting audit activities (including SOX and data integrity reviews). The analyst will collaborate cross-functionally to ensure data access is properly controlled, audit documentation is accurate, and data is delivered reliably and securely.<br>
This position requires strong attention to detail, a working knowledge of Workday security and reporting, and a commitment to data governance and compliance.</div><div></div><div>
ESSENTIAL FUNCTIONS<br>
<ul><li>Administer and maintain Workday security roles, user access, and permission structures in alignment with internal policies and audit requirements.</li><li>Support SOX and internal audit processes by preparing documentation, gathering evidence, and responding to audit inquiries.</li><li>Monitor and maintain data integrity and access controls across HR systems.</li><li>Respond to ad hoc and recurring HR data requests from internal stakeholders, ensuring accuracy, timeliness, and compliance with data privacy standards.</li><li>Collaborate with cross-functionally to support system updates, testing, and access reviews.</li><li>Maintain documentation related to security configurations, audit controls, and data request processes.</li><li>Participate in periodic access reviews and remediation efforts to ensure compliance with governance standards.</li><li>Support continuous improvement efforts in Workday security and audit readiness.</li></ul></div><div></div><div>
QUALIFICATIONS<br>
Education/Experience<br>
<ul><li>Bachelor&rsquo;s Degree in Human Resources, Information Systems, Business, or a related field.</li><li>2&ndash;4 years of experience in HRIS, HR operations, or HR technology, preferably with Workday.</li><li>Experience supporting audits (SOX or internal) and/or managing sensitive data access is strongly preferred.</li><li>Familiarity with Workday security administration and reporting tools is a plus.</li></ul>
Skills and Abilities<br>
<ul><li>Strong organizational and documentation skills with a high attention to detail.</li><li>Ability to manage multiple tasks and meet deadlines in a fast-paced environment.</li><li>Clear communication skills with the ability to explain technical concepts to non-technical audiences.</li><li>Understanding of data privacy, security, and compliance principles.</li><li>Proficiency in Excel; experience with Workday reporting or other HR analytics tools is a plus.</li><li>Collaborative mindset and ability to work effectively across teams and functions.</li></ul></div><div></div><div>
PHYSICAL DEMANDS<br>
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.</div><div></div><div>
Who We Hire?</div><div><br>
Simply put, we hire qualified applicants representing a wide range of backgrounds and abilities. MillerKnoll is comprised of people of all abilities, gender identities and expressions, ages, ethnicities, sexual orientations, veterans from every branch of military service, and more. Here, you can bring your whole self to work. We&rsquo;re committed to equal opportunity employment, including veterans and people with disabilities.</div><div></div>
This organization participates in E-Verify Employment Eligibility Verification. In general, MillerKnoll positions are closed within 45 days and are open for applications for a minimum of 5 days. We encourage our prospective candidates to submit their application(s) expediently so as not to miss out on our opportunities. We frequently post new opportunities and encourage prospective candidates to check back often for new postings.<div></div><div>
MillerKnoll complies with applicable disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact MillerKnoll Talent Acquisition at <div>careers_help@millerknoll.com</div>.</div></div>

HRIS Analyst – Workday Security

Momentive Performance Materials

<div><div>Job Title:</div><div></div>
Lead Analyst - IT Global ERP Security &amp; Compliance<div></div><div>
Summary:</div>
This position works closely with ERP IT project teams and business process owners to deliver secure, efficient, and timely ERP security solutions. It plays a critical role in ensuring Momentive&rsquo;s ERP Segregation of Duties (SoD) framework remains compliant with SOX regulations. Additionally, the role involves active collaboration with other IT security teams to support a unified defense strategy aligned with the broader goals of enterprise IT security.<div></div><div>
Responsibilities Include:</div><ul><li>
Develop and implement enterprise-wide ERP/SAP security strategies, policies, and standards.</li><li>
Collaborate with ERP IT teams and business to design role-based access control and segregation of duties (SoD) frameworks.</li><li>
Manage user administration, single sign-on (SSO), and other advanced security measures.</li><li>
Oversee user provisioning, access requests, and role management.</li><li>
Conduct regular reviews of user roles and permissions to ensure proper access controls.</li><li>
Ensure compliance with industry standards, regulatory requirements (e.g., SOX, etc), and organizational policies.</li><li>
Conduct internal and external audits, documenting findings and recommendations as per the demands from Internal and External Audit teams.</li><li>
Implement and maintain ERP GRC (Governance, Risk, and Compliance) solutions for monitoring and reporting.</li><li>
Work closely with IT teams, business, and audit teams to align SAP security goals with organizational objectives.</li><li>
Act as a liaison between stakeholders to address security concerns and propose solutions.</li><li>
Investigate ERP security incidents/requests, determine root causes, and implement corrective actions.</li><li>
Provide IT security teams with training on SAP/ERP-specific threats, such as SoD conflicts, advanced access controls, user access reviews.</li><li>
Collaborate with IT security to identify the root cause of incidents, whether it's misconfigured access, phishing attacks, or malware.</li><li>
Establish a regular cadence of meetings or updates with IT security teams to discuss emerging threats, incidents, and proactive measures.</li><li>
Perform risk analysis to determine the potential impact of threats involves a structured approach to identifying, assessing, and prioritizing risks to an organization's information systems</li><li>
Conduct security awareness simulations such as phishing assessments to help employees understand potential threats, recognize attack methods.</li><li>
Support the governance aspect of the NIST Cybersecurity Framework by ensuring that cybersecurity policies, procedures, and strategies align with organizational goals and risk management practices.</li><li>
Stay updated on emerging SAP security threats, trends, and technologies.</li><li>
Identify opportunities to enhance SAP security measures and lead their implementation.</li><li>
Provide training and knowledge-sharing sessions for IT and business users.</li><li>
Excellent communication and leadership skills to interact with diverse teams.</li></ul><div></div><div>
Qualifications:</div><div>
The following are <i>required </i>for the role</div><ul><li>
7-12 years of ERP Security Administration experience including ECC R/3, BW, PI, PLM, Portal and GRC 10.1 or similar in SAP Security</li><li>
Proven expertise in SAP/ERP GRC modules, risk analysis, and access control.</li><li>
Bachelor of Science in Computer Information Systems, Information Technology or related field.</li></ul><div></div><div>
Preferred qualifications</div><ul><li>
External compliance standards/regulations (i.e., SOX) experience.</li><li>
Understanding of audit processes, procedures and IT internal control frameworks/structures.</li><li>
SAP/ERP Certified Technology Associate &ndash; SAP Security and Authorizations.</li><li>
Knowledge of other IT security systems that integrate with SAP, such as Identity and Access Management (IAM) or SIEM (Security Information and Event Management) tools.</li><li>
CISSP, CISM, or other relevant security certifications.</li></ul><div></div><div>
#LI-Hybrid</div><div></div><div>
What We Offer:</div><div>
At Momentive, we value your well-being and offer competitive total rewards and development programs. Our inclusive culture fosters a strong sense of belonging and provides diverse career opportunities to help you unleash your full potential. Together, through innovative problem-solving and collaboration, we strive to create sustainable solutions that make a meaningful impact. Join our Momentive team to open a bright future. <i>#BePartoftheSolution</i></div><div></div><div>
About Us:</div><div><div><div>
Momentive is a premier global advanced materials company with a cutting-edge focus on silicones and specialty products. We deliver solutions designed to help propel our customer&rsquo;s products forward&mdash;products that have a profound impact on all aspects of life, around the clock and from living rooms to outer space. With every innovation, Momentive creates a more sustainable future. Our vast product portfolio is made up of advanced silicones and specialty solutions that play an essential role in driving performance across a multitude of industries, including agriculture, automotive, aerospace, electronics, energy, healthcare, personal care, consumer products, building and construction, and more.</div></div><div></div><div><div><br>
Momentive believes a diverse workforce empowers our people, strengthens our business, and contributes to a sustainable world. We are proud to be an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any characteristic protected by law.</div></div><div></div><div><div><br>
To be considered for this position candidates are required to submit an application for employment and be of legal working age as defined by local law. An offer may be conditioned upon the successful completion of pre-employment conditions, as applicable, and subject to applicable laws and regulations.</div></div><div></div><div><div><br>
Note to third parties: Momentive is not seeking or accepting any unsolicited assistance from search and selection firms or employment agencies at this time.</div></div></div></div>

Lead Analyst - IT Global ERP Security & Compliance

[24]7.ai

<div>
 <p>
  Position : Security &amp; Compliance Specialist
 </p>
 <p>
  Reports to: Manager InfoSec, GRC
 </p>
 <p>
  Department: Information Security (InfoSec)
 </p>
 <p>
  Location: Bangalore
 </p>
 <p>
  Work Mode : Hybrid
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Key Responsibilities
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role oversee the development, evaluation and implementation of governance, risk and compliance.
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role provides operational and conformance checking of information security implemented. The role will undertake specific audits tasks directly and will work with identified stakeholders to ensure that audit lifecycle is in compliance.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Additionally, this role will undertake regular conformance checking tasks to ensure compliance is met to acceptable security levels in different audits.
 </p>
 <p>
  <br/>
 </p>
 <p>
  This role will also undertake a number of critical asks and requests from security projects which manages to successful delivery of projects and the associated resources.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Further, this role will work with all departments across Technology, Business and Third Party vendors/partners and manages inter-dependencies / work-streams and across multiple projects to ensure that Projects are delivered on time:
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Provide consulting services for Technology &amp; Business team for Audit Security process and implementation of controls.
  </li>
  <li>
   Define Security assessment scope, requirements, time lines and goals.
  </li>
  <li>
   Pro-actively reviews all gaps found on audits related to systems and types of access controls on various risks like Cyber Threats, Data Security and compliance and communicate for timely actions to mitigate them.
  </li>
  <li>
   Supports in managing all type of internal and external InfoSec audits (end to end), status of Security assessment, Report Observations and remediation with all the agreed timelines.
  </li>
  <li>
   Works with end customer SPOC to ensure all the desired requirements are delivered by liaising with all the business stakeholders.
  </li>
  <li>
   Delivers Security Assessments projects on time, and at the expected quality, have root- cause analysis with clear action plan and obtain sign-off with all relevant parties.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Preferred Skills
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Ensure the organization complies with local, federal and international regulatory and legal requirements
  </li>
  <li>
   Stay up to date on all major privacy and data protection laws, GDPR, CCPA, DPA, PIPEDA etc.
  </li>
  <li>
   Experience in handling various Security Assessments, regulatory requirements but not limited to PCI- DSS, ISO27001, ISO9001, GDPR, CCPA, SOC2 and privacy shield.
  </li>
  <li>
   Practical understanding of security standards, Processes and risk frameworks.
  </li>
  <li>
   Has good understanding of audit frameworks and various datasheet involved in preparing for the external audits.
  </li>
  <li>
   Knowledge of current industry best practices and standards, local/international security and compliance guidance.
  </li>
  <li>
   Broad, and commensurately high-level knowledge of Security technology, such as: PKI, firewalls, access management, encryption, IDS &amp; IPS, Cyber threats, encryption, and identity management.
  </li>
  <li>
   Strong time management, communication and prioritization skills.
  </li>
  <li>
   Ability to work with Technical and Non- Technical business owners.
  </li>
  <li>
   Practical understanding of security processes and risk frameworks.
  </li>
  <li>
   Partners with External consultants/ internal stakeholders on Regulatory Changes to ensure regulatory changes are added within the system of record.
  </li>
  <li>
   Drive integration with Compliance teams aligned to Business Units for all the related audits (end to end).
  </li>
  <li>
   Knowledge of current industry best practices and standards, local/international security and compliance guidance.
  </li>
  <li>
   Conducting deep dives into specific areas of focus based on Risk and Regulatory priorities as and when needed.
  </li>
  <li>
   Proficiency in reviewing and assessing process flows to detect potential risks, deficient controls, duplicated effort, extravagance, and fraud, non-compliance with laws, regulations, and management policies.
  </li>
  <li>
   Partners with other Operations Managers to ensure timely and effective delivery for all audit requirements.
  </li>
  <li>
   Contribute to the Group ISMS content development, maintenance and maturity.
  </li>
  <li>
   Take the interface between custom authorities and colleagues/partners on customs Audits.
  </li>
  <li>
   Drive matrixed project planning and execution to deliver and sustain privacy compliance
  </li>
 </ul>
 <p>
  <strong>
   <u>
    Required Qualifications
   </u>
  </strong>
 </p>
 <ul>
  <li>
   Bachelor/Master of Science degree. Computer Science, Engineering, Telecommunications or management degree(would be advantage)
  </li>
  <li>
   6/6+ years&rsquo; experience in audits and compliance management
  </li>
  <li>
   Excellent planning, multi-tasking, organization and problem solving skills.
  </li>
  <li>
   Knowledge of certifications and framework like NIST, HIPAA, ISO 27K, PCI-DSS and SOC2.
  </li>
  <li>
   Excellent communication skills.
  </li>
  <li>
   Hold certifications like ISO9001, ISO 27001 and Green belt(added advantage)
  </li>
 </ul>
 <p>
 </p>
</div>


Security & Compliance Specialist

S&P Global

<b>About the Role:</b><br>
<b>Grade Level (for internal use):</b> 09
<br><b>The Team:</b> The Data Privacy, Protection, and Information Governance compliance team in Legal manage S&P Global sensitive, personal, and non-personal information. We accomplish this through implementation of policies, processes, controls, and metrics that promote compliance with global regulations.
<br><br>
<b>The Impact:</b> The Information Compliance Analyst will support all aspects of our Information Governance program, working with each of our divisions and corporate functions to operationalize our Information Governance and data privacy initiatives. Collaborating closely with the Director of Information Governance, the Information Compliance Analyst will ensure compliance with regulatory requirements, embed records management and retention processes, enhance data quality, and mitigate risks associated with data management. This role will also provide compliance support for our APAC data privacy operations.
<br><br>
<b>What’s in it for you: In this role, you will:</b><br>
Be an integral part of enhancing and developing the Information Compliance culture at S&P Global;
<br><br>
Collaborate with each division and corporate function across the enterprise;
<br><br>
Develop expertise and experience in records management and retention operations; and
<br><br>
Drive your success. Take complete ownership of your projects and drive them to completion.
<br><br>
<b>Responsibilities:</b> The Information Compliance Analyst will be responsible for:
<br><br>
Managing policy exception requests and reviews for event recording, SharePoint sites, OneDrive and email retention, and transcription;
<br><br>
Providing guidance and support to our internal business stakeholders on Information Governance policies, processes, and records retention, including oversight of the Information Governance inbox;
<br><br>
Assisting with the implementation and yearly management of Information Governance policies and procedures;
<br><br>
Supporting data privacy compliance for our APAC BAU and readiness projects; and
<br><br>
Other projects and duties as assigned.
<br><br>
<b>What We’re Looking For:</b><br>
BA/BSc degree in a relevant field such as information and records management, law, information technology, business management, or 1 or more years of relevant work experience ;
<br><br>
Knowledge of records management and a willingness to develop your expertise;
<br><br>
Broad understanding of data privacy laws and regulations;
<br><br>
Experience of managing and improving operational processes;
<br><br>
Proficiency in Microsoft Office packages;
<br><br>
Excellent attention to detail with great time management skills; and
<br><br>
Excellent cross-group collaboration skills, including conflict resolution and negotiation.
<br>#LI-RS2
<br><br>
What’s In It For You?
<br><br>
<b>Our Purpose:</b><br>
Progress is not a self-starter. It requires a catalyst to be set in motion. Information, imagination, people, technology–the right combination can unlock possibility and change the world.
<br><br>
Our world is in transition and getting more complex by the day. We push past expected observations and seek out new levels of understanding so that we can help companies, governments and individuals make an impact on tomorrow. At S&P Global we transform data into Essential Intelligence®, pinpointing risks and opening possibilities. We Accelerate Progress.
<br><br>
<b>Our People:</b><br>
We're more than 35,000 strong worldwide—so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.
<br><br>
From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We’re committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. We’re constantly seeking new solutions that have progress in mind. Join us and help create the critical insights that truly make a difference.
<br><br>
<b>Our Values:</b><br>
Integrity, Discovery, Partnership
<br><br>
At S&P Global, we focus on Powering Global Markets. Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals.
<br><br>
<b>Benefits:</b><br>
We take care of you, so you can take care of business. We care about our people. That’s why we provide everything you—and your career—need to thrive at S&P Global.
<br><br>
<b>Our benefits include:</b><br>
<b>Health & Wellness:</b> Health care coverage designed for the mind and body.
<br><br>
<b>Flexible Downtime:</b> Generous time off helps keep you energized for your time on.
<br><br>
<b>Continuous Learning:</b> Access a wealth of resources to grow your career and learn valuable new skills.
<br><br>
<b>Invest in Your Future:</b> Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs.
<br><br>
<b>Family Friendly Perks:</b> It’s not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families.
<br><br>
<b>Beyond the Basics:</b> From retail discounts to referral incentive awards—small perks can make a big difference.
<br><b>For more information on benefits by country visit:</b> https://spgbenefits.com/benefit-summaries
<br><br>
<b>Global Hiring and Opportunity at S&P Global:</b><br>
At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets.
<br><br>
<b>Recruitment Fraud Alert:</b><br>
If you receive an email from a spglobalind.com domain or any other regionally based domains, it is a scam and should be reported to reportfraud@spglobal.com . S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, “pre-employment training” or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here .
<br><br>
-----------------------------------------------------------
<br><br>
Equal Opportunity Employer
<br>S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law. Only electronic job submissions will be considered for employment.
<br><br>
If you need an accommodation during the application process due to a disability, please send an email to: EEO.Compliance@spglobal.com and your request will be forwarded to the appropriate person.
<br><br>
<b>US Candidates Only:</b> The EEO is the Law Poster http://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf describes discrimination protections under federal law. Pay Transparency Nondiscrimination Provision - https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf
<br><br>
----------------------------------------------------------- 20 - Professional (EEO-2 Job Categories-United States of America), RSKMGT202.1 - Middle Professional Tier I (EEO Job Group)
<br><br>
<b>Job ID:</b> 321918
<br><b>Posted On:</b> 2025-11-08
<br><b>Location:</b> Virtual, Gurgaon, Haryana, India

Information Compliance Analyst

Navy Exchange

<div></div><div><div><b>Job Number:</b> <b>250003BL</b><div>
</div></div><div><b>
Primary Location</b><b>:</b> United States-Virginia-Virginia Beach</div><div><b>
Organization</b><b>:</b> NEXCOMHQ<div>
</div><b>
Pay Range</b><b>:</b> $52,632 - $70,939 (salary based on exp )</div><div></div><div><p><b><br>
Note: This is a progression job that requires documentation of successful completion of all predesignated training in order to qualify for a non-competitive change to the Asset Protection Safety Analyst (Level II), NF4 (4B). The incumbent may not progress to the next level prior to having served a minimum of 12 months in this position.</b></p><p><b>
Level I (NF04/4A - Level II</b></p><p><b>
Job Summary: </b>Responsible for implementing asset protection &amp; safety programs for the Navy Exchange Omni-Channel/e-Commerce business lines with annual sales in excess of $60 million. Utilizes operating knowledge of Asset Protection and e-commerce industry standards to address critical issues regarding asset protection and recommends corrective actions to mitigate impact to the Navy Exchange Omni-Channel/e-Commerce program.</p><p><b>
Duties and Responsibilities:</b></p><ul><li>Will work to effectively utilize APS applications and resources to implement various reporting tools and investigative mechanisms for use in the Omni-Channel/e-Commerce environment.</li><li>Will leverage conceptual knowledge of retail asset protection to identify and prevent fraud within the Omni-Channel/e-Commerce environment and analyze fraud trends to develop rules and exception-based reporting on these concepts.</li><li>Will work towards conducting informative fraud trend analyses; evaluating the cause and effect escalation of red flags; interpreting trends to identify root causes and relationship to current initiatives; and conducting predictive modeling to determine potential impacts, risks, or escalation points.</li><li>Will train to provide actionable intelligence from analyzing bulk electronic data using tools like Microsoft Access, Microsoft Excel Power Query, Power Pivot, and Power BI, SQL database querying language to identify opportunities related to risk, shrink, and other financial issues.</li><li>Will develop a working knowledge of organizational best practices and company, legal, and regulatory investigative policies and procedures; and, where applicable, ensures adherence to local and country-specific laws, rules, practices, and cultures.</li><li>Will ensure operational reviews are conducted according to current standard operating procedures at the Omni-Channel/e-Commerce Fulfillment and Customer Care Centers. Works closely with Asset Protection Safety Manager (Total Loss /Omni) and Corporate Asset Protection/Safety Manager (Fraud Analytics and Systems) to identify opportunities and correct deficiencies.</li><li>Under the supervision of the Asset Protection Safety Manager (Total Loss/Omni), will promote Omni-Channel/e-Commerce physical security and safety program best practices within applicable Navy Exchange Omni-Channel/e-Commerce locations.</li><li>By direction of the Asset Protection Safety Manager (Total Loss/Omni), will participate in physical inventory processes. To include inventory preparation, physical counting of Navy Exchange assets, post-inventory reconciliation, variance reporting, and shrink action planning.</li><li>Will work towards an understanding and the effective use of web-based case management reporting systems, fraud detection tools, and fraud management systems to effectively detect, investigate, and resolve opportunities.</li><li>Will work towards understanding the scope of work required to perform effective investigative analysis as part of a team and as an individual; establishing data correlation; analyzing, planning, and structuring data findings; and reporting results and deliverables to investigators and stakeholders to support the investigative process.</li><li>Works under the general supervision of the Asset Protection Safety Manager (Total Loss and Omni-Channel) to support large cross-functional assignments by contributing support in functional areas of Asset Protection and Safety.</li><li>Will actively participate in personal and professional development as assigned by the Asset Protection Safety Manager (Total Loss/ Omni). To include but not limited to in-store, Omni-Channel, corporate, and industry-standard professional training sessions and collegiate courses in retail, business, safety, and asset protection.</li><li>Will develop and maintain strong relationships, partnerships, and communication skills at all levels of the organization, including Corporate, District, and Store Operations, as well as other military exchange systems (MCX, CGX, AAFES, etc.)</li><li>Will develop and maintain strong relationships with command, base, federal, and local law enforcement officials, U.S. Attorney, SJA, and local prosecutors when required.</li><li>Works under the general supervision of the Asset Protection Safety Manager (Total Loss and Omni-Channel) to support all Asset Protection Safety initiatives as assigned. Will be required to work independently within the framework of the Asset Protection Safety Program mission, vision, objectives, policies, and procedures. Work product will be reviewed and evaluated for regulatory and procedural compliance and in terms of overall efficiency in providing security for the Navy Exchange and protection of its assets.</li></ul><p>
Within six (6) months:</p><ul><li>Shall demonstrate the ability to leverage their knowledge towards performing successful Omni-Channel/e-Commerce customer order fraud reviews. A successful review shall be professional, efficient, thorough, consistent, and accurate.</li><li>Shall demonstrate the ability to effectively work as part of a team and as an individual. Adhering to the specific points notated in the CODE S Asset Protection Code of Conduct.</li><li>Shall demonstrate an understanding of Omni-Channel/e-Commerce physical security and safety program best practices within applicable Navy Exchange Omni-Channel/e-Commerce locations.</li></ul><p>
Within twelve (12) months:</p><ul><li>Shall demonstrate an understanding of Navy Exchange Omni-Channel/e-Commerce systems, tools, and applications; possesses the ability to describe order movement and define all possible actions to be taken at each stage within the system.</li><li>Shall demonstrate an understanding of retail shrink and shortage and provide specific examples of current Navy Exchange Omni-Channel/e-Commerce total loss initiatives.</li><li>Shall demonstrate an understanding of Navy Exchange Omni-Channel/e-Commerce operational best practices regarding high-value returns and accountability, return center processes and standard operating procedures, and TPL provider best practices.</li><li>Shall demonstrate the ability to provide actionable intelligence from analyzing bulk electronic data using tools like Microsoft Access, Microsoft Excel Power Query, Power Pivot, and Power BI, SQL database querying language to identify opportunities related to risk, shrink, and other financial issues.</li><li>Shall demonstrate the ability to leverage their knowledge towards performing a successful analysis of Omni-Channel/e-Commerce inventory management/financial systems. A successful review shall be professional, efficient, thorough, consistent, and accurate. Incumbent may progress non-competitively to an ASSET PROTECTION/SAFETY ANALYST (OMNI-CHANNEL) (Level II) NF4B (2671) upon the completion of qualification requirements and training within a 1-year timeframe; advancement is not permitted with less than 1 year in current position.</li></ul><p>
Performs other duties as assigned.</p><p>
This is a non-critical sensitive national security position. The incumbent must receive and maintain a favorably adjudicated Tier 3 (or equivalent) Personnel Security investigation granting eligibility for assignment and retention to a sensitive national security position failure to do so may result in termination of employment.</p></div><div></div><div><p><b><br>
Level I</b></p><p><b>
GENERAL EXPERIENCE: </b>Three years of experience gained in the administrative, investigative, or loss prevention fields, which enabled the applicant to gain skills in dealing with others in person-to-person work relationships, and the ability to exercise mature judgment.</p><p><b>
OR</b></p><p><b>
SUBSTITUTION OF EDUCATION FOR EXPERIENCE:</b> One year of related academic study above the high school level may be substituted for nine months of experience, up to a maximum of a four-year bachelor's degree for three years of general experience.</p><p><b>
AND SPECIALIZED EXPERIENCE: </b>Two years of progressively responsible experience in retail loss prevention, asset protection, or Omni-Channel Fraud Review that involved analytical, planning, advisory, operational, or evaluative work in security/investigations; internal fraud review; internal control techniques; inventory shrink and shortage control and at least one-year involving database analysis, predictive data analytics, or other experience that can support an understanding of harvesting and analyzing large sets of data using SQL, DAX, Microsoft Access, Microsoft Excel, Microsoft Power Query, Microsoft Power Pivot, Microsoft Power BI or similar tools towards providing actionable intelligence.</p><p><b>
Level II</b></p><p>
MQRs:</p><p>
A total of 6 years consisting of the following:</p><p><b>
GENERAL EXPERIENCE: </b>Three years of experience gained in the administrative, investigative, or loss prevention fields, which enabled the applicant to gain skills in dealing with others in person-to-person work relationships, and the ability to exercise mature judgment.</p><p><b>
OR</b></p><p><b>
SUBSTITUTION OF EDUCATION FOR EXPERIENCE: </b>One year of related academic study above the high school level may be substituted for nine months of experience, up to a maximum of a four-year bachelor's degree for three years of general experience.</p><p><b>
AND</b></p><p><b>
SPECIALIZED EXPERIENCE:</b> Three years of progressively responsible experience in retail loss prevention, asset protection, or Omni-Channel Fraud Review that involved analytical, planning, advisory, operational, or evaluative work in security/investigations; internal fraud review; internal control techniques; inventory shrink and shortage control and at least one year involving database management, predictive data analytics, or other experience that can support an understanding of harvesting and analyzing large sets of data using SQL, DAX, Microsoft Access, Microsoft Excel, Microsoft Power Query, Microsoft Power Pivot, Microsoft Power BI or similar tools towards providing actionable intelligence</p><div><br>
</div></div><div><b>
Job</b><b>:</b> Management</div><div><b>
Schedule</b><b>:</b> Full-Time (35 + hours)</div><div><b>
Unposting Date</b><b>:</b> Nov 14, 2025, 10:59:00 PM</div></div>

ASSET PROTECTION/SAFETY ANALYST LEVEL I/Level II (OMNI-CHANNEL)

Search 10000+ Security and compliance analyst jobs near you this November. New roles added regularly across leading industries. Apply today.