About The Role
Keka is looking for a GRC skilled to own and mature our compliance and risk management program across multiple frameworks and jurisdictions. You will work closely with the CISO, engineering, legal, and customer-facing teams to keep Keka audit-ready, close third-party risk gaps, and represent our security posture to prospects and clients directly.

Key Responsibilities
*Frameworks & Certifications*
- Own day-to-day compliance operations for ISO 27001 and SOC 2 Type II, including control ownership, evidence collection, and continuous readiness (not just audit-time scrambling)
- Track control gaps, drive remediation with engineering/IT ops, and maintain the compliance calendar across certification cycles

*ITGC*
- Own IT General Controls testing and evidence across access management, change management, backup/DR, logical security, and computer operations
- Design and maintain ITGC control matrices mapped to ISO 27001/SOC 2 requirements, avoiding duplicate audit asks across frameworks
- Coordinate with engineering/DevOps/IT ops to pull periodic evidence (access reviews,



change logs, backup test results) on a recurring cadence rather than only at audit time
- Support ITGC walkthroughs for financial/SOX-adjacent audits if/when applicable to Keka's customers or investors

*Regulatory Compliance*
- Manage GDPR and DPDPA compliance programs – DPIAs, RoPA, breach notification workflows, data subject request handling
- Maintain CCPA compliance posture for US-facing operations
- Build and maintain working knowledge of regional regulations relevant to Keka's expansion markets – Middle East (e.g., UAE PDPL, Saudi PDPL) and Philippines (RA 10173 / Data Privacy Act) – and translate these into internal controls and contract-ready positions

*Audits*
- Serve as primary point of contact for internal and external auditors across ISO 27001, SOC 2, ITGC, and customer-driven audits
- Prepare audit evidence packages, walk auditors through controls, and manage audit find

📌 Security Specialist (Hyderabad)
🏢 Keka HR
📍 Hyderabad