Security Compliance Auditor in the BPO/ITES industry, the primary responsibility is to ensure the organization complies with information security standards, client requirements, and regulatory frameworks while minimizing operational risks.

Security Compliance Auditor Roles & Responsibilities (BPO Industry)

- Conduct internal security and compliance audits across business operations, IT infrastructure, and delivery teams.
- Monitor adherence to organizational security policies, SOPs, and client security requirements.
- Perform periodic risk assessments and identify security gaps, vulnerabilities, and compliance issues.
- Review user access controls, privileged access management, and identity & access management (IAM) processes.
- Audit physical security controls, including access cards, CCTV monitoring, visitor management, and secure work areas.
- Verify endpoint security compliance, including antivirus status, encryption, patch management, and device configuration.
- Conduct workstation and floor audits to ensure employees comply with clean desk policies, data protection guidelines, and acceptable use policies.
- Review security incidents, investigate policy violations, and recommend corrective and preventive actions.
- Coordinate with IT, HR, Operations,



and Facilities teams to implement security controls and resolve audit findings.
- Maintain audit documentation, compliance reports, evidence records, and audit trackers.
- Support client audits by preparing required documentation and audit evidence.
- Monitor compliance with data privacy and confidentiality requirements.
- Conduct employee security awareness sessions and promote information security best practices.
- Track compliance metrics and prepare audit reports for management review.
- Follow up on audit observations and ensure timely closure of corrective actions.
- Support business continuity and disaster recovery activities from a compliance perspective.
- Ensure adherence to company information security policies in a 247 BPO setting.

Key Skills

- Information Security & Risk Management
- Internal Auditing
- Risk Assessment & Gap Analysis
- Identity & Access Management (IAM)
- Incident Management
- Data Privacy & Confidentiality
- Corrective & Preventive Action (CAPA)
- Microsoft Excel & Reporting
- Documentation & Audit Management
- Stakeholder Management
- Analytical & Problem-Solving Skills
- Excellent Communication & Presentation Skills

📌 Security Compliance Auditor (Hyderabad)
🏢 IntouchCX
📍 Hyderabad