About Skedara: Skedara is an ETRM/CTRM consulting and technology services firm. We have 100+ people and work with global energy trading companies. We already hold ISO 27001 and in the examination period of SOC 2 Type 2, and are now working towards GDPR compliance and ISO 9001. We now need a dedicated owner to maintain our compliance posture and lead us through ongoing audit cycles. The Role: As Compliance Manager, you will own the ongoing operation of our ISMS. You will lead ISO 27001 surveillance and recertification audits and run the SOC 2 Type 2 renewal from the start of the observation period through to the issued report. You will make sure controls keep working as designed, evidence is ready for audit at any time, and audit findings are closed on time.

Key Responsibilities
• SOC 2 Type 2 renewal: plan and manage the annual observation period, coordinate with the CPA firm, handle PBC (Provided By Client) requests and sample testing, manage exceptions and management responses, and arrange bridge letters when needed
• ISO 27001 audits: prepare for and lead annual surveillance audits and three-yearly recertification audits with the certification body
• ISO 9001: support the implementation of our QMS and prepare us for the initial certification audit
• GDPR: drive our GDPR compliance programme, including data mapping, the ROPA (record of processing activities), DPIAs, privacy notices, DPAs with clients and vendors, and the data subject request process; also track DPDP Act obligations
• Run the internal audit programme and the management review meetings required by ISO 27001 Clause 9
• Track major and minor non-conformities, observations and OFIs (opportunities for improvement) through root cause analysis and CAPA (corrective and preventive action) to closure
• Keep the ISMS documentation up to date: Statement of Applicability, risk register, risk treatment plan, policies and procedures




• Run periodic control activities with control owners: user access reviews, joiner/mover/leaver checks, vulnerability and patch evidence, backup and BCP/DR tests, and policy attestations
• Own continuous control monitoring and evidence collection across HR, IT, delivery and finance
• Manage third-party and vendor risk assessments, and track subservice organisations and CUECs (complementary user entity controls)
• Answer client security questionnaires, vendor audits and due-diligence requests, and share our SOC 2 report under NDA
• Run security and compliance awareness training and track completion What we are looking for:
• 5–10 years of experience in compliance, information security or GRC
• Must have: hands-on ownership of at least one full audit cycle: a SOC 2 Type 2 observation period and report, and/or ISO 27001 surveillance or recertification audits
• Strong working knowledge of ISO 27001:2022 Annex A controls and the SOC 2 Trust Services Criteria
• Experience working directly with CPA firms and certification-body auditors, including handling findings and exceptions
• Well organised and good with documentation, able to drive control owners across teams to deliver evidence on time
• Clear communication, comfortable working with both leadership and delivery teams Valuable to Have:
• ISO 27001 Lead Auditor or Lead Implementer certification, CISA, CISM, CRISC or similar
• Experience in an IT services or consulting company
• Experience with GRC or compliance automation platforms such as Vanta, Drata, Sprinto or similar
• Experience implementing GDPR or a privacy programme
• Experience implementing or auditing ISO 9001 (QMS)
• Exposure to ISO 27701 or ISO 22301 Why join us:
• You'll own the compliance function at a growing company
• You'll work directly with the founders, and your work will have visible impact
• You'll work with global energy trading clients

📌 Compliance Manager – Certifications (Bengaluru)
🏢 Skedara Technology
📍 Bengaluru