Role: IT & Facilities Compliance Executive

Experience: 1-3 Years

Location: Mumbai / Bangalore

About the Role

We are seeking a detail-oriented IT & Facilities Compliance Executive to support organizational compliance, audit readiness, vendor governance, and physical facilities compliance operations. You will work closely with Information Security, Delivery Assurance & Governance (DAG), IT, Facilities, Legal, HR, and external stakeholders to ensure adherence to regulatory, contractual, and internal standards.

Key Responsibilities

- Audit & IT Compliance Operations: Support internal and external audits across ISO 27001:2022, ISO 9001:2015, SOC 2 Type II, HIPAA, and HITRUST. Maintain audit-readiness documentation, track closure of internal security reviews for IT and Facilities, and conduct IT induction sessions for employees, consultants, and leadership.
- Vendor Governance & TPRM: Manage vendor onboarding, Third-Party Risk Management (TPRM) activities, and compliance assessments for IT and Facilities vendors in coordination with Legal, Procurement, IT, and business teams.
- Facilities Compliance: Perform physical compliance checks and maintain audit-ready maintenance records for CCTV, HVAC, fire suppression systems, fire drills, and pest control. Populate and maintain building compliance records in the BDO Compliance Management Tool.
- Client & Stakeholder Support:



Support client audits, RFPs, RFIs, compliance questionnaires, and ESG/CSR compliance queries. Assist with due diligence requests from finance teams, investors, and external stakeholders.
- Governance & Documentation: Maintain compliance records including Risk Registers, ROPA (Records of Processing Activities), Data Flow Diagrams (DFDs), KPIs, and OKRs. Handle and track agreements (MSA, NDA, DPA, BAA/BBA, SOW), support annual policy updates, and update incident and change request tickets.

Qualifications & Skills

- Education: Bachelor’s degree in Information Technology, Business Administration, Facilities Management, Compliance, or a related field.
- Experience: 1–2 years of hands-on experience in IT compliance, governance, audit support, or facilities compliance.
- Domain Knowledge: Solid understanding of ISO 27001, SOC 2, HIPAA, HITRUST, ISO 9001, and vendor governance/TPRM processes.
- Tools & Execution: Proficiency in MS Office, compliance management tools, and version-controlled documentation repositories, paired with solid stakeholder coordination and analytical skills.
- Preferred: Certifications in ISO 27001, compliance, risk management, or information security, along with exposure to ESG/CSR programs and ITSM incident/change management.

📌 IT Compliance Executive (Mumbai)
🏢 Quantiphi
📍 Mumbai