Compliance Engineer, Fonazo

The role:

Fonazo is hiring a Compliance Engineer to own the Global Compliance Engine: the controls that let an AI voice agent place a lawful call in any country it operates in.

Fonazo is an AI Voice Agent Builder. A business launches a multilingual voice agent in about two minutes, and every call that agent makes passes through compliance controls enforced in the product, not in a policy document. The engine is live in five countries today.

Country - Regimes enforced in product

India - TRAI, DoT, DLT, DPDP Act 2023

United States - FCC, TCPA, FTC

United Kingdom - Ofcom, ICO, PECR

Germany - BNetzA, UWG

France - ARCEP, DGCCRF

The next markets are the UAE, Spain, and Italy. This role turns each new country from a legal reading into shipped, tested, auditable controls, and makes compliance the reason enterprises choose Fonazo.

Reports to - Founder and CEO

Base - Pune, India

Type - Full time

Experience - 4+ years in compliance engineering, GRC engineering, or regulated product engineering

What the role owns

- The Global Compliance Engine rule set for every live country: consent capture, calling windows, do-not-call and preference register scrubbing, caller identification, AI disclosure, sender and template registration, call frequency limits, and recording consent.
- Country launches. Each new market moves from regulatory text to product requirements, shipped controls, automated tests, and a customer-facing control summary.
- Compliance as code. Rules are versioned, tested, and deployed like software, so a regulatory change becomes a release, not a memo.
- Data protection engineering under DPDP, GDPR, and UK GDPR: data mapping, retention and deletion, data subject requests, cross-border transfer controls, and processor obligations.
- Audit programmes. Readiness, evidence automation, and auditor management for independent attestations such as SOC 2 and ISO 27001, carried through to formal closure.
- Audit trails.



Every call carries a tamper-evident record of which controls applied and why.
- Enterprise deal support: security and compliance questionnaires, data processing agreements, and regulator-facing documentation, answered in days.
- Regulatory watch across all live and planned markets, with impact assessed and scheduled before the effective date.
- Telecom registration workflows with operators and aggregators in each country.

How Fonazo positions compliance

Fonazo states precisely which controls the product enforces and proves each one with evidence. The person in this role protects that standard in every external document, sales conversation, and contract.

What the candidate brings

- 4+ years building compliance controls into a software product, or running GRC engineering for a regulated technology company.
- Working knowledge of telemarketing and electronic communications regulation in at least two of India, the US, the UK, and the EU.
- Hands-on data protection experience under GDPR or DPDP, including records of processing, impact assessments, and deletion pipelines.
- Direct experience taking a company through an independent security or privacy audit from readiness to report.
- The ability to read primary regulation and write an unambiguous product requirement and test case from it.
- Engineering skill to script, query, and automate: policy as code, evidence collection, control monitoring.
- Clear writing for three audiences: engineers, enterprise legal teams, and regulators.




- Experience with AI governance frameworks such as the EU AI Act, NISTAI RMF, or ISO 42001 is a strong advantage.
- A background in telecom, fintech, healthtech, or contact centre technology is an advantage.

Stack and tooling

Fonazo does not publish its internal architecture. Fit is assessed on what the candidate has run in production, so every application should state:

- Cloud environments and deployment models operated in, and at what scale.
- GRC, evidence automation, and control monitoring tools used, and which were built in house.
- Policy as code and rules engine approaches used, with one example of a regulation turned into an automated control.
- Languages and data tooling used for compliance automation.
- Consent management, preference register, and data subject request systems built or integrated.
- Telephony, messaging, or communications systems worked with.
- Frameworks audited against, the candidate's exact role in each audit, and the outcome.
- The stack the candidate would choose to build a multi-country compliance engine from zero, and why.

What success looks like

Timeframe - Outcome

30 days - Full control inventory for all five live countries, mapped to source regulation, with gaps ranked

90 days - Automated test coverage for every live control and a standard enterprise compliance pack used by sales

180 days - One recent country launched end to end and one independent audit programme in active fieldwork

12 months - New country launch reduced to a repeatable playbook measured in weeks

Why this role

Compliance here is the product, shipped in code and sold as a reason to buy.

Ownership of a multi-country engine at a stage where every design decision is still open.

Work that sits at the front of AI voice regulation in eight markets.

Direct line to the founder and a seat in enterprise deals.

Pay: ₹30,000.00 - ₹80,000.00 per month

Work Location: In person

📌 Compliance Engineer (Pune)
🏢 Blessing SoftTech
📍 Pune