Security Operations Analyst II – Security Compliance Center at Expedia in India - Gurgaon

Job description

• The Expedia Group Security Governance, Risk, Compliance and Privacy (GRCP) organization is building a world‑class Security Compliance Center to support global PCI DSS, SOC 2, NIST, and Privacy compliance operations. We are seeking a highly organized and detail‑oriented Security Compliance Center Analyst to support evidence collection, control testing, documentation, and coordination activities across multiple security and privacy frameworks.
• This role is ideal for someone who thrives in a fast‑paced environment, has strong operational discipline, and enjoys working across technical and business teams to help maintain a secure and compliant environment. As part of the India‑based Security Compliance Center, you will play a key role in how we execute day‑to‑day compliance operations and audit readiness tasks.

Responsibilities

• · Support operational compliance activities across PCI DSS, SOC 2, NIST CSF, and Privacy frameworks, including gathering evidence and validating control execution.
• · Manage and maintain Jira tickets, workflows, and follow‑ups related to compliance tasks, remediation items, and audit requests.
• · Collect, review, and document control evidence to ensure accuracy, completeness, and alignment with audit requirements.
• · Assist with preparing compliance documentation, including standard operating procedures, control descriptions, and audit artifacts.
• · Coordinate with technical teams to obtain required information, clarify requests, and support timely closure of audit‑related actions.
• · Participate in internal readiness assessments and support external audits by delivering samples, evidence, and system information.
• · Maintain organized repositories of compliance evidence and audit artifacts to support repeatable processes and ongoing compliance.
• · Identify gaps and issues in evidence, documentation, or control execution and escalate to the Compliance Center Manager when needed.
• · Help track and report status of compliance operational activities, risks, and blockers.
• · Contribute to process improvements for evidence collection, documentation quality, and audit efficiency.
• · Support ongoing monitoring activities to validate the effectiveness of key IT and security controls.
• · Perform additional tasks related to compliance operations as assigned.

Requirements

• · 3–5 years of experience in security compliance, IT audit, or related technical operational roles.
• · Experience supporting compliance programs such as PCI DSS, SOC 2, NIST CSF, ISO 27001, or similar frameworks.
• · Familiar with cloud technologies and modern IT environments; experience with AWS, and Azure is a plus.
• · Strong organizational skills with the ability to manage multiple tasks, deadlines, and evidence requests simultaneously.
• · Comfortable working in Jira or similar workflow/ticketing systems; experience managing queues and SLAs is a plus.
• · Ability to document processes, controls, and procedures clearly and accurately.
• · Strong communication skills and ability to coordinate with both technical and non‑technical partners.
• · Able to identify inconsistencies or gaps in evidence and raise issues appropriately.
• · Understanding of basic security concepts such as authentication, encryption, logging/monitoring, and network fundamentals is preferred (not required).
• · Information security or compliance certification is a plus (e.g., CISA, Security+, ISO 27001 Associate, PCIP).
• · Experience with any of the Big 4 is a plus.
• · Capable of working with diverse teams and promoting a positive, enterprise‑wide security culture.
• · Strong project management, multitasking, and organizational skills required.

Skills

Required

• Security compliance
• IT audit
• PCI DSS
• SOC 2
• NIST CSF
• ISO 27001
• Jira
• Documentation
• Communication
• Organizational skills
• Project management
• Multitasking

Preferred

• AWS
• Azure
• CISA
• Security+
• ISO 27001 Associate
• PCIP
• Big 4 experience