Compliance Manager

Compliance Manager

Key Responsibilities:

1. Compliance Management:

   • Develop and implement compliance programs in line with applicable laws, regulations, and industry standards (e.g., ISO 27001, ISO 27701, ISO 22301, ISO 31000, ISO 20000-1, GDPR, DPDP Act, ITGC, NIST, CIS, MITRE).
   • Conduct internal compliance audits and risk assessments to identify gaps and areas of improvement.
   • Monitor and interpret regulatory changes and assess their impact on business operations.
   • Ensure alignment of compliance policies with corporate governance frameworks.

2. Regulatory and Legal Compliance:

   • Stay up-to-date with local, national, and international regulatory requirements.
   • Collaborate with legal teams to ensure compliance with corporate laws, financial regulations, and data protection laws.

3. Risk Management & Governance:

   • Identify, assess, and mitigate compliance risks across business operations.
   • Implement and oversee governance, risk, and compliance (GRC) frameworks.
   • Establish due diligence processes for vendors, third-party relationships, and partners.

4. Audit and Investigations:

   • Lead internal and external compliance audits, including ISO and regulatory audits.
   • Investigate non-compliance incidents and implement corrective and preventive actions (CAPA).
   • Ensure proper documentation of compliance reports, risk assessments, and audit findings.

5. Policy and Training Development:

   • Develop, review, and update compliance policies, procedures, and guidelines.
   • Conduct employee training on compliance policies, ethical conduct, and regulatory requirements.
   • Foster a compliance-aware culture within the organization through continuous education and awareness programs.

6. Stakeholder Collaboration:

   • Work closely with senior leadership, IT security, Product, HR, IT Admin, legal, Accounts, and risk management teams to ensure comprehensive compliance coverage.
   • Provide expert guidance to business units on compliance-related matters.

7. Qualifications & Skills:

   • Education: Business Administration, Information Security, or related fields.
   • Experience: Minimum 7+ years in compliance, risk management, governance, or regulatory affairs.
   • Strong understanding of global compliance standards (ISO, GDPR, DPDP, etc.).
   • Experience in conducting compliance audits and risk assessments.
   • Excellent analytical, problem-solving, and decision-making skills.
   • Strong leadership, communication, and stakeholder management abilities.

1. Additional Compliance Standards & Frameworks:

   • Experience with other compliance requirements beyond the core ones mentioned (e.g., industry-specific frameworks).
   • Hands-on experience with ITGC, CIS, MITRE, and advanced regulatory frameworks.

2. Advanced Stakeholder Engagement:

   • Experience in engaging with regulatory bodies and government agencies.
   • Providing strategic recommendations for compliance to executive leadership.

3. Proficiency in Compliance Tools & Technologies:

   • Hands-on experience with GRC tools and compliance management software.

4. Certifications (Preferred but Not Mandatory):

   • ISO 27001 Lead Auditor/Lead Implementer or other relevant compliance certifications.

5. Enhanced Policy Development & Training:

   • Expertise in designing custom compliance training programs tailored to different business functions.
   • Experience in developing automated compliance monitoring processes.

• Education: Business Administration, information security, or related fields.
• Certifications (Preferred): ISO 27001 Lead Auditor/Lead Implementer, or other relevant compliance certifications.
• Experience: Minimum 8+ years in compliance, risk management, governance, or regulatory affairs.
• Strong understanding of global compliance standards (ISO, GDPR, DPDP, etc.).
• Experience in conducting compliance audits and risk assessments.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong leadership, communication, and stakeholder management abilities.
• Proficiency in GRC tools and compliance management software.