Company Description Quality Labs is a consulting, training, and auditing services firm that helps organizations simplify and strengthen their Information Security, Cybersecurity, Privacy Protection, and Management Systems. Founded in January 2008, the firm focuses on practical, market-relevant solutions that enhance compliance maturity, audit readiness, and customer confidence.

Quality

Labs collaborates closely with clients to design and implement tailored processes that deliver measurable improvements, rather than relying on generic templates or pre-built toolkits. The company brings strong management and technical expertise across international standards for information security and privacy, management system certifications, product certifications, and professional training.

Role Description The Assistant Manager Compliance is a full-time, on-site role based in Noida. This position is responsible for supporting the design, implementation, and monitoring of compliance frameworks related to information security, cybersecurity, privacy, and management system standards. Day-to-day activities include assisting in compliance gap assessments, preparing audit documentation, tracking corrective and preventive actions, and coordinating with internal teams and clients to ensure timely closure of compliance-related tasks.

The role involves maintaining up-to-date knowledge of relevant regulations and standards, contributing to policy and procedure development, and supporting training and awareness initiatives.

The Assistant Manager

Compliance also helps prepare reports and dashboards for management review and participates in external and internal audits as needed.

Qualifications

- Strong understanding of information security, cybersecurity, and privacy regulations and standards (e.g., ISO/IEC 27001, ISO/IEC 27701, GDPR, PCI-DSS, India Data Protection Act).
- Experience with management system certifications (e.g., quality, environment,



information security, occupational health and safety) and related compliance frameworks.
- Proven ability to conduct compliance assessments, prepare audit documentation, and support risk management and remediation activities.
- Excellent analytical, documentation, and reporting skills, with attention to detail and accuracy.
- Effective communication and stakeholder management skills, with the ability to work collaboratively across cross-functional teams.
- Strong organizational and time-management capabilities, with the ability to manage multiple engagements and deadlines.
- Bachelor’s degree in a relevant discipline such as Information Technology, Computer Science, Management, or a related field.
- Professional certifications (e.g., ISO auditor/implementer, CISA, CISSP, CIPP) are an advantage.
- 2-3 years of Prior experience in compliance, audit, or consulting roles within IT, security, or management systems domains is highly desirable.

Key Responsibilities

1. Strategic Leadership & Client Engagement:

1. Manage cybersecurity consulting projects across industries, aligning security strategies with business goals.
2. Mentor junior consultants, fostering technical growth and client-facing skills.
3. Manage project delivery to time and budget, ensuring high-quality outputs and client satisfaction
4. Contribute to internal training, knowledge sharing, and development of reusable assets and methodologies.
5. Build and maintain client relationships, acting as a trusted advisor on cyber risk and resilience.
6.



Develop audit plans and scope engagements.

2. Cybersecurity Program Management

1. Develop and implement data protection policies, procedures, and technical controls as required by various Indian and Global frameworks like ISO 27001, ISO 22301, ISO 27701, DPDP Act, GDPR, SOC, CIS, NIST, HIPAA, RBI security regulations, SEBI security regulations and other relevant frameworks.
2. Conduct risk and controls assessments, analyzing threats, vulnerabilities, and business impact assessments for clients.
3. Prepare audit-ready documentation and reports for internal and external stakeholders

Required Skills

Technical Skills

1. Comprehensive understanding deployed security solutions on one or more cloud platforms (AWS, GCP or Azure) and advising the cloud native security solutions that can be deployed.
2. Comprehensive knowledge of IT networks like firewall, switches, router etc, network security, vulnerability management.
3. Comprehensive understanding of security concepts and tools - Certificates, DLP, WAF, SIEM, firewalls, DDOS prevention, IDS/IPS, privileged access management, Encryption, SSL, VPN, IPSec, TCP/IP, DNS and web security architecture etc.
4. Deep understanding of security frameworks and processes - CIS, NIST, PCI DSS. SOC 1 /2, ISO 27001, GDPR, HIPAA and various security regulations etc
5. Ability to document risks, security controls , security policies & procedures and evidence to ensure compliance towards requirements pertaining to Information Security, Cybersecurity and Privacy Security

Non-Technical Skills

1. Robust analytical and problem-solving abilities
2. Excellent written and verbal communication
3. Ability to manage multiple projects independently
4. Stakeholder engagement and client-facing skills
5. Experience in planning and monitoring the ongoing and projects

*Kindly share your resume at: [email protected]

📌 Assistant Manager Compliance (Noida)
🏢 Quality Labs
📍 Noida