Basic Function

Support the organization’s information security compliance program by leading audits, regulatory compliance initiatives, control assessments, risk management activities, and evidence collection. Act as a trusted advisor to the business, promoting risk-based decision-making, compliance awareness, control maturity, and process improvement.

Key Responsibilities

Compliance & Audit Management

- Lead and maintain information security compliance programs aligned with corporate policies and regulatory requirements.
- Support and manage audits and compliance frameworks such as ISO 27001, SOC 2, GDPR, DORA, FISMA, and related standards.
- Serve as a subject matter expert on security and compliance matters.
- Plan and execute framework audits, collect and validate evidence, perform control testing, and assess procedural compliance.
- Identify, document, and track audit findings, remediation plans, and control improvements.
- Partner with business and technology teams to ensure successful audit outcomes and ongoing compliance.
- Maintain knowledge of business systems, processes, regulations, and industry best practices.

Risk Management

- Monitor emerging security, privacy, and regulatory risks affecting the business.
- Conduct risk assessments and support risk register maintenance and treatment activities.
- Evaluate and score risks related to audit findings, exceptions, and attestations.
- Monitor, report, and escalate identified risks while driving remediation to acceptable risk levels.
- Collaborate with stakeholders to ensure risk exposure remains within approved tolerances.

Security Governance & Reporting

- Monitor compliance with security standards and controls.
- Review security metrics, compliance KPIs, and governance reports.
- Support security awareness and compliance initiatives.
- Prepare compliance and risk reports for management and key stakeholders.

Stakeholder & Customer Support

- Respond to customer security questionnaires, due diligence requests, and regulatory inquiries.




- Build strong relationships with internal and external stakeholders.
- Provide timely issue resolution, recommendations, and process improvements.
- Support projects from planning through completion, including reporting and recommendations.

Required Qualifications

Experience

- 3–4 years of experience in:
- Information Security
- Cybersecurity Compliance
- Governance, Risk & Compliance (GRC)
- IT Audit or Security Assurance

Compliance & Risk Knowledge

Robust understanding of

- ISO 27001
- SOC 2
- NIST Cybersecurity Framework
- GDPR
- Risk Management methodologies

Technical Knowledge

Working knowledge of

- Identity & Access Management (IAM)
- Multi-Factor Authentication (MFA)
- Vulnerability Management
- Logging & Monitoring
- Cloud Security fundamentals (Azure, AWS, GCP)
- Secure Change Management
- Data Protection & Encryption

Core Skills

- Audit coordination and evidence management
- Risk assessment and control testing
- Policy and procedure reviews
- Compliance reporting and documentation
- Stakeholder management and communication

Tools

Experience with

- Microsoft 365
- Word and Excel (reporting and analysis)
- SharePoint / OneDrive
- GRC platforms such as Drata, Archer, LogicGate, or ServiceNow GRC

Education Bachelor’s degree in information security, Computer Science, IT, Risk Management, or a related field.

Preferred Qualifications

Certifications

- ISO 27001 Internal Auditor or Lead Auditor
- Security+
- Certified in Cybersecurity (CC)
- CISA

Additional Knowledge

- DORA, CCPA, NYDFS
- Azure Defender / Security Center
- AWS Security Services
- Compliance metrics and KPI reporting

Soft Skills

- Executive presentations
- Project management
- Process improvement
- Training and coaching
- Cross-functional collaboration

Location: This role will be based out of The Leela Office located on the 4th Floor, Airport Road, Kodihalli, Bangalore- 560008. Work Timing : 1 pm to 10 pm IST. Cab Pick-up and drop available.

Hybrid : Our expectation at this time, is that you would work from our office on Tuesdays, Wednesdays, Thursdays with flexibility to work from home on Mondays and Fridays.

📌 Control Advisor (Bengaluru)
🏢 Notified
📍 Bengaluru