Job Title: ICP Compliance Lead
Location: Hyderabad - OnSite
Position Type: Full-time

This role is the compliance backbone for the Identity Control Plane (ICP), ensuring that security, privacy, and regulatory expectations don t just stay on paper - they actually get implemented, tracked, and proven.

You ll own how compliance is executed, measured, and reported across identity ecosystems (workforce + customer). The role sits tight with risk, security, and platform teams - making sure controls are real, auditable, and continuously maintained.

You re basically the bridge between policy and reality.

What You ll Drive

1. End-to-End Compliance Execution

(Policy Control Evidence)

- Take full ownership of compliance across ICP environments.

- Convert policies, standards, and regulatory requirements into clear implementation actions.

- Ensure compliance is built into design, configuration, and operations - not retrofitted later.

- Maintain clear mapping between:

- Policies

- Implemented controls

- Supporting evidence

2. Compliance Reporting & Visibility

- Own all ICP-level compliance reporting:

- Control effectiveness

- Identified gaps

- Remediation progress

- Overall risk posture

- Build structured, audit-ready reports for:

- Leadership

- Internal stakeholders

- Audit teams

- Define reporting cadence and control health metrics.

- Ensure everything reported is backed by real, verifiable evidence.

3. Risk Management (with GIS)

- Act as the primary ICP contact for the Global Information Security (GIS) risk function.

- Work closely with GIS to:

- Assess risks

- Prioritize them

- Track them through closure

- Align with ICP teams on mitigation plans and execution timelines.

- Monitor residual risks and ensure:

- Risk acceptance is documented

- Proper approvals are in place

4. Audit & Assessment Leadership

- Lead ICP involvement in:

- Internal audits

- External audits





- Control assessments

- Prepare and validate audit evidence (accuracy + completeness matters big time).

- Coordinate audit responses across multiple ICP teams.

- Track findings drive remediation ensure closure.

- Validate that fixes are sustained post-remediation.

5. Documentation & Backlog Governance

- Own compliance documentation ecosystem:

- Policies

- Standards

- Procedures

- Control narratives

- Identify outdated or missing documentation.

- Push gaps into structured backlog (Jira or similar).

- Work with ICP leads to prioritize documentation alongside engineering work.

- Ensure documentation is:

- Updated

- Easy to find

- Aligned with actual implementations

6. Cross-Functional Influence

- Work closely with:

- Identity teams

- EUC

- Platform engineering

- Operations

- Embed compliance into daily workflows, not just checkpoints.

- Guide teams on compliance impact of:

- Design decisions

- Platform changes

- Exceptions

- Balance:

- Security

- Usability

- Operational efficiency

- Communicate clearly to both tech and non-tech audiences.

Core Requirements

Compliance, Risk & Governance

- Strong experience in compliance, risk, or governance within enterprise IT.

- Ability to translate regulatory and policy requirements into actual working controls.

- Solid understanding of:

- Control frameworks

- Risk assessments

- Audit lifecycles

Identity & Access Understanding

- Working knowledge of:

- Identity & Access Management (IAM)

- Workforce identity

- Customer identity





- Understanding of how identity systems and access controls tie into compliance.

- Ability to evaluate compliance impact of platform or architecture changes (even without owning design).

Audit, Evidence & Reporting Strength

- Hands-on experience managing audit evidence and compliance artifacts.

- Solid eye for:

- Accuracy

- Consistency

- Traceability

- Ability to create leadership-level compliance reports.

- Focus on continuous compliance (not just audit-time readiness).

Documentation & Work Management

- Experience setting documentation standards and maintaining them.

- Familiar with tools like:

- Confluence (or similar knowledge platforms)

- Jira (or equivalent backlog tools)

- Ability to convert compliance gaps into actionable backlog items.

- Skilled at balancing compliance work with ongoing technical delivery.

Nice-to-Have

- Experience working alongside cybersecurity or enterprise risk teams.

- Exposure to Zero Trust and identity-led security models.

- Experience in global environments with varied regulatory landscapes.

- Certifications like:

- CISSP

- CISA

- CRISC

- or equivalent

Role Style / Operating Model

- Senior IC role - high ownership, no direct team.

- Acts as the compliance authority within ICP.

- Strong cross-functional collaboration required.

- Works well in ambiguity - brings structure through:

- Documentation

- Governance

- Evidence tracking

- Practical mindset:

- Reduce risk

- Enable business + tech outcomes (not block them)

- May step in for:

- Audit crunch timelines

- Risk escalations

- Critical compliance decisions

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 ICP Compliance Lead (Hyderabad)
🏢 ConglomerateIT
📍 Hyderabad