Manager IT Governance & Compliance

Job description

About the Role - 4-8 Years Experience

We are looking for an experienced Manager IT Governance & Compliance to drive our information security, risk management, and compliance initiatives. The ideal candidate should have hands-on experience in implementing security frameworks, conducting audits, and ensuring alignment with regulatory requirements.

Key Responsibilities

1. Support and manage Information Security Compliance, Risk, and Audit programs across the organization.
2. Assess, design, develop, and implement Information Security programs, including governance structures, policies, standards, processes, and procedures.
3. Ensure timely communication to stakeholders regarding compliance requirements, audit findings, risks, and security-related activities.
4. Collaborate with business teams, technical teams, external vendors, and auditors to ensure compliance with industry standards and regulatory frameworks such as ISO 27001, PCI DSS, RBI guidelines, etc.
5. Review, update, and maintain security documentation, SOPs, and audit evidence to ensure continuous compliance.
6. Monitor security controls and support internal/external audits to close gaps and implement corrective actions.
7. Identify risks and recommend mitigation measures to strengthen the organizations security posture.

Skills & Competencies

1. Strong understanding of ISO 27001, PCI-DSS, RBI compliance, IT governance frameworks, and risk management practices.
2. Experience in developing information security policies, SOPs, and process documents.
3. Knowledge of IT audits, vendor assessments, and security controls.
4. Excellent communication, documentation, and stakeholder management skills.
5. Ability to work cross-functionally and manage compliance requirements end-to-end.