IT Compliance Executive

Job Title:

Department:

Experience:

Location:

Shift Timings:

Job Summary:

We are seeking a detail-oriented and proactive IT Compliance Executive with 2-3 years of experience to ensure our organization complies with IT policies, regulatory requirements, and internal controls. The ideal candidate will work closely with various teams to implement compliance programs, perform audits, and mitigate IT risks.

Key Responsibilities:

• Monitor and ensure compliance with IT policies, standards, and regulatory requirements (e.g., GDPR, ISO 27001, ISO 27701, 9001, SOC2, HIPAA).
• Assist in developing, updating, and enforcing IT compliance frameworks and procedures.
• Conduct regular IT compliance audits and risk assessments.
• Coordinate with internal and external auditors during IT audits.
• Identify gaps in IT controls and recommend corrective actions.
• Support implementation of data protection, cybersecurity, and privacy controls.
• Maintain compliance documentation and generate compliance reports.
• Stay updated with changes in IT laws and regulations relevant to the organization.
• Provide training and awareness programs on IT compliance for employees.
• Collaborate with IT, Legal, and Risk Management teams to address compliance issues.
• Track and report compliance incidents and help with remediation efforts.

Required Skills & Qualifications:

• Bachelors degree in Information Technology, Computer Science, or related field.
• 2-3 years of experience in IT compliance, Risk management, or IT audit.
• Good knowledge of IT compliance standards and regulations (e.g., ISO 27001, GDPR, SOC2).
• Familiarity with IT governance frameworks like ITIL is a plus.
• Strong analytical and problem-solving skills.
• Excellent communication and documentation skills.
• Ability to work independently and as part of a team.
• Detail-oriented with a proactive approach to compliance management.

Preferred Certifications:

• ISO 27001 Lead Implementer / Auditor
• Certified in Risk and Information Systems Control (CRISC) or any relevant certification