Description

This role is for one of Weekday’s clients

Min Experience: 6+ years
Location: Bangalore, Delhi
JobType: full-time

Requirements

The main responsibilities in the role are:

- Compliance: Ensure compliance with relevant external regulations and internal standards, such as GDPR, ISO 27001, and others.
- Govern and oversee GDPR / AAS / DORA / SCHREMS compliance for Application Security and Third-Party Risk Management
- Monitor ITRM KRIs and deliver remediation plans
- Ensure availability and maintenance of NIST control evidence.
- Develop, implement, and manage comprehensive security compliance programs.

- Policy Development: Create and enforce security policies, procedures, and guidelines to maintain compliance.
- IAM topics: Oversee the IAM NIST Controls, Recertification campaigns and ad hoc KRI mitigation actions.
- Audit and Assessment: Collaborate to conduct regular audits and assessments to identify compliance gaps and ensure adherence to security standards.
- Risk Management: Identify, assess, and mitigate compliance risks to the organisation.

- Deliver Risk analysis on business requests (new apps, new projects, new vendors…)
- Ensure Risk Acceptances are registered, and follow-up actions are tracked to closure.
- Lead Security exception Validation.
- Conduct awareness sessions to LOD1 Infosec team on Risk Management

- RFP Support

- Respond to customer security questionnaires and review security clauses.

- Incident Response: Lead the response to security incidents, ensuring proper documentation and resolution in line with compliance requirements.
- Training and Awareness: Develop and deliver training programs to increase awareness of security compliance across the organisation.

- Design,



launch and reporting of phishing campaigns and conduct awareness sessions.

- Monitoring and Reporting: Monitor IT systems for potential risks and vulnerabilities and provide regular reports to senior management.

- Responsible for internal/external audit monitoring and reporting – global CISO ownership.
- Ensure the follow-up of audit recommendations (Inspection, external auditors, regulators, etc.).
- Monitor and coordinate the timely closure of audit recommendations.
- Work closely with IT, legal, and business teams to integrate compliance requirements into business processes.

Technical Skills:

- Knowledge of Microsoft Defender Phishing Module or a similar platform.
- Proficiency in MS Office, particularly MS Excel and PowerPoint.

Behavioural Skills on the job:

- Solid understanding of security awareness, incident management, and crisis management principles.
- Proactive communication, presentation, and stakeholder‑management skills.
- Proven leadership and project‑management abilities.
- Ability to work independently and make effective decisions under pressure.
- Strong organisational, analytical, presentation, and reporting skills.
- Capacity to challenge local stakeholders’ arguments and action plans.
- Excellent organizational and cross‑functional coordination skills.
- Strong adaptability, openness to feedback, and willingness to continuously learn.
- Results‑driven mindset with strong planning and execution discipline.

Qualifications:

- Bachelor’s or master’s degree preferred.
- Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor, CompTIA Security+, etc.
- At least 7 years of work experience in Cybersecurity operations (Risk management, Data security, Network security, IAM).

Must-have skills

GDPR, cissp

Good-to-have skills

Cyber Security, RFP

📌 Data Privacy Compliance Technical Consultant (Bengaluru)
🏢 Recognized
📍 Bengaluru