28 Aug
|
TeamsWork.In
|
India
28 Aug
TeamsWork.In
India
Position Overview TeamsWork is seeking an experienced and detail-oriented Governance, Risk & Compliance (GRC) Manager to establish, manage, and continuously improve our compliance, governance, privacy, and risk management programs. This role will be responsible for overseeing compliance with industry-recognized frameworks such as SOC 2, ISO 27001, GDPR, CCPA, and other applicable regulatory requirements, while also supporting internal corporate governance initiatives, policy management, SOP oversight, and operational compliance across the organization. The ideal candidate will serve as the primary compliance and governance leader, working closely with executive leadership, department heads, engineering teams, HR, operations, customer success, and external auditors to ensure that the organization maintains a strong compliance posture and scalable governance processes. Governance & Compliance Management Develop, implement, and maintain the organization's Governance, Risk, and Compliance (GRC) program. Establish and continuously improve compliance processes, controls, policies, and procedures. Maintain organizational compliance with applicable regulations, standards, and contractual obligations. Monitor regulatory developments and recommend updates to internal policies and practices. Act as the primary point of contact for compliance-related matters across the organization. Prepare compliance reports, dashboards, and executive summaries for leadership. Security & Privacy Compliance Lead and manage compliance initiatives for: Privacy and data protection requirements Other applicable security and compliance frameworks Coordinate internal and external compliance audits.
Maintain compliance evidence repositories and audit documentation. Manage remediation activities arising from audits, assessments, and compliance reviews. Conduct periodic compliance assessments and gap analyses. Support customer security questionnaires, vendor assessments, and compliance inquiries. Risk Management Develop and maintain organizational risk management processes. Facilitate risk identification, assessment, mitigation, and monitoring activities. Maintain enterprise risk registers and risk treatment plans. Conduct periodic risk assessments across business functions. Collaborate with leadership to address compliance and operational risks. Policy & SOP Governance Develop, review, maintain, and enforce company-wide policies and procedures. Review departmental SOPs to ensure consistency, completeness, and compliance. Coordinate annual reviews and updates of organizational policies and SOPs. Corporate Governance & Operational Compliance Support the development and implementation of governance frameworks across the organization. Monitor adherence to internal policies, procedures, and operational standards. Conduct internal compliance reviews and audits. Compliance Training & Awareness Develop and deliver compliance, privacy, security, and policy awareness training.
Promote a culture of compliance throughout the organization. Educate team members on regulatory requirements and internal policies. Coordinate periodic compliance acknowledgments and certifications. Vendor & Third-Party Compliance Conduct vendor risk assessments and due diligence reviews. Maintain vendor compliance records and documentation. Support procurement and contract review processes from a compliance perspective. Bachelor's degree in Information Security, Cybersecurity, Risk Management, Business Administration, Law, or a related field. ~5+ years of experience in Governance, Risk & Compliance (GRC), Information Security Compliance, Privacy Compliance, Audit, or related roles. ~ Hands-on experience managing: ~ Experience coordinating external audits and compliance assessments. ~ Solid understanding of risk management methodologies. ~ Experience developing and managing policies, procedures, and governance frameworks. ~ Excellent documentation, organizational, and project management skills. ~ Experience working in SaaS, cloud-based, or technology organizations. Experience supporting enterprise customer compliance requirements. Experience implementing GRC platforms and compliance management tools. Certified Data Privacy Solutions Engineer (CDPSE) Certified in Risk and Information Systems Control (CRISC) Maintain successful SOC 2 compliance. Establish a structured policy and SOP governance program. Implement a centralized compliance tracking and reporting framework. Improve organizational compliance maturity across departments. Reduce audit findings and compliance gaps.
📌 Compliance Monitoring Manager - Remote (India)
🏢 TeamsWork.In
📍 India