Role: IT & Facilities Compliance Executive

Experience:
1-3 Years

Location:
Mumbai / Bangalore

About the Role
We are seeking a detail-oriented IT & Facilities Compliance Executive to support organizational compliance, audit readiness, vendor governance, and physical facilities compliance operations. You will work closely with Information Security, Delivery Assurance & Governance (DAG), IT, Facilities, Legal, HR, and external stakeholders to ensure adherence to regulatory, contractual, and internal standards.

Key Responsibilities
• Audit & IT Compliance Operations: Support internal and external audits across ISO 27001:2022, ISO 9001:2015, SOC 2 Type II, HIPAA, and HITRUST. Maintain audit-readiness documentation, track closure of internal security reviews for IT and Facilities, and conduct IT induction sessions for employees, consultants, and leadership.
• Vendor Governance & TPRM: Manage vendor onboarding, Third-Party Risk Management (TPRM) activities, and compliance assessments for IT and Facilities vendors in coordination with Legal, Procurement, IT, and business teams.
• Facilities Compliance: Perform physical compliance checks and maintain audit-ready maintenance records for CCTV, HVAC, fire suppression systems, fire drills, and pest control. Populate and maintain building compliance records in the BDO Compliance Management Tool.
• Client & Stakeholder Support:



Support client audits, RFPs, RFIs, compliance questionnaires, and ESG/CSR compliance queries. Assist with due diligence requests from finance teams, investors, and external stakeholders.
• Governance & Documentation: Maintain compliance records including Risk Registers, ROPA (Records of Processing Activities), Data Flow Diagrams (DFDs), KPIs, and OKRs. Handle and track agreements (MSA, NDA, DPA, BAA/BBA, SOW), support annual policy updates, and update incident and change request tickets. Qualifications & Skills
•

Education:
Bachelor’s degree in Information Technology, Business Administration, Facilities Management, Compliance, or a related field.
•

Experience:
1–2 years of hands-on experience in IT compliance, governance, audit support, or facilities compliance.
• Domain Knowledge: Solid understanding of ISO 27001, SOC 2, HIPAA, HITRUST, ISO 9001, and vendor governance/TPRM processes.
• Tools & Execution: Proficiency in MS Office, compliance management tools, and version-controlled documentation repositories, paired with solid stakeholder coordination and analytical skills.
• Preferred: Certifications in ISO 27001, compliance, risk management, or information security, along with exposure to ESG/CSR programs and ITSM incident/change management.

📌 IT Compliance Executive (Mumbai)
🏢 Quantiphi
📍 Mumbai