This critical leadership role directs, maintains, and scales the

organizations certification requirements and framework. This role owns the end-to-end

lifecycle of enterprise certifications (including ISO, PCI-DSS, SOC, and CMMI), champions

client audits, and participates in or manages the third-party risk assessment program.

Reporting Structure & Group Dynamics

Vertical Reporting Line: Directly Reports To Vice President (VP) for Corporate Quality

Inter-Departmental Alignment (Horizontal & Vertical Coordination)

- Vertical Coordination: Collaborates directly with the Leadership (IT Infrastructure,

Chief Information Security Officer, HR, FMG, Legal and Compliance, Finance,

Technology, etc. ) to communicate compliance postures, severe risk escalations, and

audit vulnerabilities.

- Horizontal Coordination: IT & Infosec, Legal & Compliance and Corporate

Governance, Procurement, Business and Support teams.

Roles & Responsibilities

- Direct the continuous lifecycle of all corporate certifications, including but not limited

to ISO 9001, ISO 14001, ISO 14064-1, ISO 27001, ISO 42001 (AIMS), PCI-DSS,

SOC 1/SOC 2 Type II, and CMMI (Dev/Services).

- Dynamically evaluate framework gap analyses as systems shift or scale,

recommending corrective action structures directly to the VP for Corporate Quality.

- Act as the authoritative point-of-contact and master orchestrator for all incoming

client-driven audits, requests for proposals (RFPs), security questionnaires, and

statutory independent check inspections.

- Coordinate on-site and remote independent registrar audits (Stage 1 & Stage 2

examinations),



managing remediation lifecycles for any non-conformances

discovered.

- Represent Corporate Quality within the broader Disaster Management Emergency

Response Team (DMERT) and coordinate with IT Service and Change Management

(ITSCM) during operational events.

Standard Qualifications & Requirements

Educational Attainment

- Minimum Required: Bachelors degree from an accredited institution in Computer

Science, Information Technology, Cybersecurity, Management Information Systems

(MIS), Corporate Quality Management, or a related field.

- Preferred: Master’s degree in Business Administration (MBA) or an advanced degree

in Technical Information Security/Corporate Governance.

Years of Experience

- Minimum of 8–10 years of progressive operational experience within IT Governance,

Risk, Compliance, or Information Security fields.

- At least 4–5 years spent in a dedicated leadership or managerial capacity, directing

multi-layered compliance teams inside global, multi-site operating structures.

Required Technical Knowledge

- Deep blueprint knowledge of standard management frameworks: ISO/IEC 27001

(ISMS), ISO 9001 (QMS), and the emerging ISO/IEC 42001 (AIMS).

- Thorough operating comprehension of the payment card industry security standard

(PCI-DSS v4.0), AICPA Trust Services Criteria (SOC 1/SOC 2 Type II), and

Capability Maturity Model Integration (CMMI) structures.

Professional Certifications Completed (Minimum of two preferred)

- ISO 27001 / ISO 9001 / ISO 42001 Lead Auditor certifications
- Project Management Skilled (PMP) or CMMI Associate qualifications (highly

advantageous)

📌 Senior Manager - Corporate Quality (Mumbai)
🏢 Straive
📍 Mumbai