To ensure the organization’s security posture meets internal policies, industry standards, and regulatory requirements by managing security audits, facilitating compliance activities, and driving continuous improvements in controls and processes.
Responsibilities
Plan, coordinate, and support internal and external security audits (e.g., ISO 27001, SOC 2, PCI-DSS, RBI,SEBI).
Ensure compliance with regulatory requirements and internal policies.
Conduct control assessments, gather audit evidence, and manage remediation of findings.
Maintain audit documentation and compliance records.
Collaborate with IT, legal, and business teams to improve security controls.
Monitor changes in regulations and update policies accordingly.
Prepare compliance reports for leadership and promote security awareness across the organization.