TP

Director Information Security

Gurugram, HR, IN

4 days ago
Save Job

Summary

Please send your updated resume to "[email protected]".


Position Overview:

We are seeking a experienced Compliance Director with a strong background in leading and managing compliance frameworks, including SOC 1, SOC 2, PCI DSS, ISO 27001, and overseeing internal and external audits. The ideal candidate will have over 12 years of experience in compliance management, regulatory audits, and certification processes, with a proven track record of driving organizational compliance programs in fast-paced environments.


Key Responsibilities:

  1. Compliance Framework Management:
  • Oversee and maintain compliance programs for SOC 1, SOC 2, PCI DSS, ISO 27001, ensuring adherence to regulatory requirements and industry standards.
  • Develop, implement, and continuously improve compliance policies, processes, and controls.
  1. Audit Leadership:
  • Lead internal and external audit processes, including client audits, preparatory audits, and group certification audits.
  • Serve as the primary liaison with auditors, certification bodies, and client compliance teams.
  • Manage and resolve audit findings and ensure timely implementation of corrective actions.
  1. Risk Assessment and Mitigation:
  • Conduct regular risk assessments to identify and address compliance risks.
  • Develop and maintain a robust risk management framework aligned with organizational goals.
  1. Team Leadership and Collaboration:
  • Build, mentor, and lead a team of compliance professionals, fostering a culture of excellence and accountability.
  • Collaborate cross-functionally with IT, legal, and business units to align compliance efforts with organizational objectives.
  1. Client and Stakeholder Engagement:
  • Engage with clients to address compliance-related inquiries, support RFPs, and ensure trust in the organization’s compliance posture.
  • Represent the company in client discussions, audits, and regulatory forums.
  1. Training and Awareness:
  • Develop and deliver compliance training programs to ensure organizational awareness and adherence to standards.
  • Stay updated on regulatory changes and provide insights on their impact to stakeholders.
  1. Reporting and Documentation:
  • Maintain accurate and comprehensive documentation for all compliance activities.
  • Generate regular compliance reports for executive leadership and stakeholders.


Qualifications:

  1. Education:
  • Bachelor’s degree in Computer Science, Information Technology, Law, or a related field. Master’s degree preferred.
  1. Experience:
  • Minimum 12 years of experience in compliance management, audits, and certifications, with significant exposure to SOC 1, SOC 2, PCI DSS, and ISO 27001 frameworks.
  1. Skills and Competencies:
  • Deep understanding of compliance frameworks and regulatory requirements.
  • Strong project management and organizational skills.
  • Excellent communication, negotiation, and stakeholder management abilities.
  • Analytical mindset with attention to detail and problem-solving skills.
  1. Certifications:
  • Relevant certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer are highly desirable.

How strong is your resume?

Upload your resume and get feedback from our expert to help land this job

People also searched: