We are looking for a senior compliance expert to act as an advisor to our management team. This is a consultation-only role: there is no hands-on implementation. You will guide us across information security and regulatory compliance frameworks, and help us plan and prioritise our compliance roadmap.
Key responsibilities
- Compliance strategy: advise management on which frameworks to pursue, and in what order, based on our business and clients.
- Framework guidance: guide us on PCI DSS, ISO 27001, SOC 2, GDPR, India’s DPDP Act and other relevant standards.
- Gap assessments: review our current policies and practices, and identify gaps against each framework.
- Audit readiness: advise on documentation, controls and evidence needed for audits and certifications.
- Client requirements: help us respond to client security questionnaires and compliance requests.
Engagement details
- Time commitment: about 15 to 20 hours per month.
- Mode: remote, through phone calls and messages. No hands-on implementation.
- Availability: reachable for calls between 10:00 AM and 7:00 PM IST, Monday to Friday.
- Compensation: hourly fee, or a fixed monthly retainer for up to 20 hours.
Must-have qualifications
- 10 to 15+ years of experience in information security, IT compliance, or governance, risk and compliance (GRC).
- Hands-on experience across multiple frameworks, including PCI DSS, ISO 27001 and SOC 2.
- Robust understanding of data protection regulations such as GDPR and India’s DPDP Act.
- Experience leading audits or certification programmes end to end.
- Experience advising leadership on compliance strategy.
- Available for calls and messages during working hours.
- Must be located in India.
Preferred qualifications
- Certifications such as ISO 27001 Lead Auditor/Lead Implementer, CISA, CISM, CISSP or PCI QSA.
- Experience with IT services, SaaS or technology companies serving UK or global clients.
- Experience with cloud security compliance (AWS, Azure or GCP).
- Experience with HIPAA or other industry-specific frameworks.