Base Career helps you apply smarter for this job.
Key skills for this role
Support the organization’s information security compliance program by leading audits, regulatory compliance initiatives, control assessments, risk management activities, and evidence collection. Act as a trusted advisor to the business, promoting risk-based decision-making, compliance awareness, control maturity, and process improvement.
Lead and maintain information security compliance programs aligned with corporate policies and regulatory requirements.
Support and manage audits and compliance frameworks such as ISO 27001, SOC 2, GDPR, DORA, FISMA, and related standards.
Serve as a subject matter expert on security and compliance matters.
Plan and execute framework audits, collect and validate evidence, perform control testing, and assess procedural compliance.
Identify, document, and track audit findings, remediation plans, and control improvements.
Partner with business and technology teams to ensure successful audit outcomes and ongoing compliance.
Maintain knowledge of business systems, processes, regulations, and industry best practices.
Monitor emerging security, privacy, and regulatory risks affecting the business.
Conduct risk assessments and support risk register maintenance and treatment activities.
Evaluate and score risks related to audit findings, exceptions, and attestations.
Monitor, report, and escalate identified risks while driving remediation to acceptable risk levels.
Collaborate with stakeholders to ensure risk exposure remains within approved tolerances.
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
Bengaluru, IND
Bengaluru, IND
Chennai, IND
Chennai, IND
Chennai, IND
Chennai, IND
Crawley, GBR
Bengaluru, IND
Monitor compliance with security standards and controls.
Review security metrics, compliance KPIs, and governance reports.
Support security awareness and compliance initiatives.
Prepare compliance and risk reports for management and key stakeholders.
Respond to customer security questionnaires, due diligence requests, and regulatory inquiries.
Build strong relationships with internal and external stakeholders.
Provide timely issue resolution, recommendations, and process improvements.
Support projects from planning through completion, including reporting and recommendations.
3–4 years of experience in: Information Security Cybersecurity Compliance Governance, Risk & Compliance (GRC) IT Audit or Security Assurance
Information Security
Cybersecurity Compliance
Governance, Risk & Compliance (GRC)
IT Audit or Security Assurance
Strong understanding of:
ISO 27001
SOC 2
NIST Cybersecurity Framework
GDPR
Risk Management methodologies
Working knowledge of:
Identity & Access Management (IAM)
Multi-Factor Authentication (MFA)
Vulnerability Management
Logging & Monitoring
Cloud Security fundamentals (Azure, AWS, GCP)
Secure Change Management
Data Protection & Encryption
Experience with:
Microsoft 365
Word and Excel (reporting and analysis)
SharePoint / OneDrive
GRC platforms such as Drata, Archer, LogicGate, or ServiceNow GRC
Bachelor’s degree in information security, Computer Science, IT, Risk Management, or a related field.
ISO 27001 Internal Auditor or Lead Auditor
Security+
Certified in Cybersecurity (CC)
CISA
DORA, CCPA, NYDFS
Azure Defender / Security Center
AWS Security Services
Compliance metrics and KPI reporting
Private UK financial-services provider of shareholder, pension, retirement, remediation, and credit technology for organizations and their customers.
Visit company websiteJobs and hiring trendsFull-time
Mid · 3+ years experience
Hybrid
Apply faster on company sites with our extension.