Senior Compliance Specialist

Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future.

As a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results.

Join our team and create your future.

At Huron, our Corporate Security & GRC team keeps the firm’s certifications, audits, and client commitments on track. As a Sr. Compliance Specialist (Associate) within Information Technology, Security Services in India, you will keep audits, policies, and client security requests moving, and provide GRC leadership and business stakeholders with accurate, audit-ready compliance information.

You will support Huron’s governance, risk, and compliance program and its certification, assurance, and regulatory obligations, including ISO/IEC 27001:2022, ISO 22301, SOC 2, HIPAA, CMMC, and SOX, working closely with IT, Legal, and business partners and SMEs. Strong attention to detail, clear written communication, and the ability to manage many concurrent requests are essential.

As the Sr. Compliance Specialist (Associate), you will:

• Support the review, update, and rollout of Huron IT and Security policies and procedures, and maintain ISMS documentation for ISO/IEC 27001:2022
• Maintain the GRC risk and issue log and risk exception records, working with owners to keep ratings, due dates, and status current
• Manage policy exceptions (vulnerability, end-of-life (EOL), and other requests) with business teams, tracking deadlines and obtaining leadership approval
• Gather data for GRC and security metrics, KPIs, and KRIs for management reporting
• Support business impact analyses (BIAs) and business continuity and disaster recovery (DR) testing, including scoping, scheduling, evidence, and follow-up
• Facilitate internal, external, and client audits (e.g., ISO 27001, SOC 2, HIPAA, CMMC, SOX), coordinating auditors and stakeholders and ensuring evidence is complete, accurate, and audit-ready
• Monitor corrective and preventive actions (CAPA) and audit non-conformities through to closure
• Respond to client RFP security sections, questionnaires, and vendor risk assessments, and support contract reviews of security and data protection terms with Huron’s Legal department, escalating non-standard terms
• Assist with vendor onboarding, software approvals, and vendor security reviews using third-party risk management practices
• Assist the Incident Response and third-party risk teams with security incident investigations
• Support security awareness efforts through training completion tracking, phishing follow-up, and Cybersecurity Awareness Month activities
• Contribute to continual process improvement and automation across all GRC workflows.

Requirements:

• Bachelor’s degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline
• 2-4 years of experience in governance, risk, and compliance, IT audit, information security, or a related security or compliance role
• Working knowledge of common security, attestation, and compliance frameworks (e.g., ISO 27001, ISO 22301, SOX, HIPAA, NIST, SOC 2)
• Strong written and verbal communication skills, with the ability to summarize technical findings for a non-technical audience
• Excellent organizational skills, with the ability to manage a high volume of concurrent requests and track detail accurately
• Customer-oriented approach, comfortable working directly with auditors, clients, and internal stakeholders across IT, Legal, and the business
• Willingness to work US business hours as needed, coordinating daily with a primarily US-based security team

Preferences:

• Experience with GRC platforms (e.g., ServiceNow, OneTrust, Archer, ProcessUnity)
• Relevant security, risk, compliance, or audit certifications (e.g., ISO 27001 Lead Auditor, CISA, CRISC, Security+)
• Familiarity with business continuity and disaster recovery practices (e.g., ISO 22301)
• Experience with Smartsheet, MS Project, SharePoint, or similar tools for tracking and reporting
• Analytical problem-solving skills, including the ability to synthesize compliance and risk data into a format that supports decision-making

Position Level

Associate

Country

India

About Us

At Huron, we’re redefining what a consulting organization can be. We go beyond advice to deliver results that last. We inherit our client’s challenges as if they were our own. We help them transform for the future. We advocate. We make a difference. And we intelligently, passionately, relentlessly do great work…together.

Are you the kind of person who stands ready to jump in, roll up your sleeves and transform ideas into action? Then come discover Huron.

Whether you have years of experience or come right out of college, we invite you to explore our many opportunities. Find out how you can use your talents and develop your skills to make an impact immediately. Learn about how our culture and values provide you with the kind of environment that invites new ideas and innovation. Come see how we collaborate with each other in a culture of learning, coaching, diversity and inclusion. And hear about our unwavering commitment to make a difference in partnership with our clients, shareholders, communities and colleagues.

Huron Consulting Group offers a competitive compensation and benefits package including medical, dental, and vision coverage to employees and dependents; a 401(k) plan with a generous employer match; an employee stock purchase plan; a generous Paid Time Off policy; and paid parental leave and adoption assistance. Our Wellness Program supports employee total well-being by providing free annual health screenings and coaching, bank at work, and on-site workshops, as well as ongoing programs recognizing major events in the lives of our employees throughout the year. All benefits and programs are subject to applicable eligibility requirements.

Huron is fully committed to providing equal employment opportunity to job applicants and employees in recruitment, hiring, employment, compensation, benefits, promotions, transfers, training, and all other terms and conditions of employment. Huron will not discriminate on the basis of age, race, color, gender, marital status, sexual orientation, gender identity, pregnancy, national origin, religion, veteran status, physical or mental disability, genetic information, creed, citizenship or any other status protected by laws or regulations in the locations where we do business. We endeavor to maintain a drug-free workplace.