Certification & Compliance Leadership

Own and lead the end-to-end strategy, implementation, certification, audit, maintenance, and continual improvement of cloud compliance and assurance programs across Airtel Cloud services, platforms, products, infrastructure, and shared services.

Lead certification and attestation activities for:

- MeitY Empanelment / Government Cloud Compliance (GI Cloud / MeghRaj)
- ISO/IEC 27001:2022 (ISMS)
- ISO/IEC 27017 & ISO/IEC 27018
- ISO/IEC 27701 (Privacy Information Management System)
- ISO 22301 (Business Continuity Management System)
- ISO 20000-1 (IT Service Management)
- ISO 9001 (Quality Management System)
- SOC 1 Type I & Type II
- SOC 2 Type I & Type II/ISAE 3402
- SOC 3
- PCI DSS
- Uptime Institute Tier Certification
- CSA STAR
- CMMI Level 3
- GCC (Government Cloud Compliances)
- DPDPA
- Any emerging regulatory, customer, industry, or telecom-specific assurance requirements.

Governance & Program Management

- Establish and maintain an enterprise-wide compliance and certification roadmap aligned with business objectives and regulatory requirements.
- Manage multiple certification, surveillance, recertification, and attestation programs concurrently.
- Act as the single point of accountability for external auditors, certification bodies, assessors, regulators, and customer assurance teams.
- Drive organization-wide compliance readiness through governance forums, compliance reviews, risk assessments, and control monitoring.
- Develop certification dashboards, executive reporting, and compliance status updates for senior leadership.

System and Organization Controls (SOC)



& Assurance Program Management

- Lead SOC 1, SOC 2, ISAE 3402 and SOC 3 attestation programs from readiness assessment through final report issuance.
- Drive control design reviews, evidence management, auditor coordination, remediation tracking, and management responses.
- Lead development of system descriptions, management assertions, service commitments, control narratives, Trust Services Criteria mapping, and final assurance reports.
- Support customer assurance requests, due diligence activities, and third-party security assessments using approved compliance artefacts and attestation reports.

Regulatory & MeitY Compliance

- Lead compliance activities related to MeitY empanelment and Government Cloud Compliance requirements.
- Ensure adherence to data residency requirements, cloud governance mandates, and applicable Government of India guidelines.
- Coordinate and manage STQC assessments and audits.
- Maintain compliance with applicable Indian cybersecurity, privacy, telecom, and data protection regulations.

Policy, Standards & Control Management

- Develop, maintain, and enhance security policies, standards, procedures, and governance frameworks aligned to certification requirements.




- Ensure business processes are designed, operated, and evidenced in compliance with certification and regulatory obligations.
- Drive standardization and maturity improvement across cloud operations, engineering, service delivery, and support functions.

Audit & Continuous Improvement

- Lead Stage 1, Stage 2, Surveillance, Recertification, Customer, Internal, Regulatory, and Third-Party audits. Manage external certification bodies.
- Coordinate internal audit programs and Management Review Board activities.
- Track audit findings, non-conformities, observations, and corrective/preventive action plans through closure.
- Drive continual improvement initiatives and automation opportunities for evidence collection, monitoring, and compliance reporting.
- Support customer audits, third-party questionnaires and due diligence responses by leveraging SOC reports, control assertions and approved compliance artefacts.
- Support continuous compliance improvement by identifying repeat issues, control design gaps and automation opportunities for evidence collection and monitoring.

Control Assurance

Oversee assessment and effectiveness of key controls including:

- Identity & Access Management
- Privileged Access Management
- Change Management
- Incident Response
- Vulnerability Management
- Security Monitoring & Logging
- Vendor Risk Management
- Data Protection & Privacy Controls
- Backup & Recovery
- Business Continuity & Disaster Recovery
- Cloud Security Governance
- IT Service Management Controls

📌 GRC- Cloud security Risk & Compliance Manager(6-12 Years) (Noida)
🏢 Airtel Digital
📍 Noida