We are seeking an experienced Compliance Manager to lead the organizations Governance, Risk, and Compliance (GRC) program with primary responsibility for maintaining and managing compliance against: ISO 27001 SOC 2 Type II PCI DSS The role will be responsible for audit readiness, control governance, risk assessments, compliance reporting, policy management, certification lifecycle management, and stakeholder coordination across technology, security, legal, privacy, and business teams. The Compliance Manager will act as the primary point of contact for auditors, certification bodies, and senior leadership regarding security compliance initiatives.
- Role: Compliance Manager – GRC
- Location: Pune
- Experience: 8 to 12 Years
- Job Type: Full time Employment
What You'll Do:
- Compliance Program Management Lead enterprise compliance programs for
- ISO 27001
- SOC 2 Type II
- PCI DSS Establish compliance roadmaps and annual assessment plans.
- Develop and maintain compliance policies, standards, and procedures.
- Ensure security controls remain aligned with regulatory and business requirements.
- Drive continuous improvement of compliance programs.
- ISO 27001 ISMS Management Maintain and enhance the Information Security Management System (ISMS).
- Manage ISO 27001 certification and recertification activities.
- Internal Audits
- Management Reviews
- Surveillance Audits
Expertise You'll Bring:
- Compliance Frameworks ISO 27001:2022 SOC 2 Type II PCI DSS 4.0 NIST Cybersecurity Framework ISO 27017 ISO 27018 ISO 27701 Governance Risk Enterprise Risk Management Risk Register Management Control Assessments Compliance Monitoring Audit Management GRC Platforms Archer ServiceNow GRC Audit Board Drata One Trust (Preferred) Documentation Policies Standards Control Framework Mapping Evidence Collection Audit Artefacts Compliance Reporting
- Preferred Certifications: Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) ISO 270