Compliance & SOC Manager

GoldenSource Corp.; Mumbai; Hybrid; INR 2,000,000 - 3,200,000; Full time

Job summary

GoldenSource International is seeking a Compliance Manager within the SDAG to safeguard data privacy and oversee audits. You will consolidate information, validate findings, and report to leadership with a focus on data protection and regulatory alignment.

You will drive cross-functional collaboration, maintain policy records, and help train staff on information security practices. This role emphasizes proactive privacy governance and timely issue resolution.

Qualifications

• Experience with ISO27701 or similar data privacy frameworks.
• Auditing background with clear workflow articulation.
• SOC2 reporting experience and interaction with US audit firms.
• Ability to prepare management reports from audits and analyses.
• Strong documentation skills and ISO documentation familiarity.
• Proficient in MS Excel, PowerPoint and related office tools.
• Knowledge of ISO27001/ISO22301 or SOC1/SOC2 is beneficial.
• Excellent written and spoken communication; leadership abilities.
• Self-motivated, able to work alone or in a team, meets deadlines.

Responsibilities

• Audit across departments; support external audits for ISO and SOC.
• Develop and implement data privacy framework and policies.
• Monitor regulatory developments (GDPR, DORA) and align timelines.
• Collaborate with internal teams to embed data protection in processes.
• Maintain policy documents, audit records, and action items.
• Plan short- and long-term governance for Data Privacy.
• Assist training to raise awareness of data privacy responsibilities.

Tools

Jira

MS Excel

MS PowerPoint

MS Word

Job description

Company Profile

GoldenSource International is a fast growing FinTech firm and a leader in data management software solutions for the financial services sector. Headquartered in New York, GoldenSource also has key offices in London, Milan and Mumbai, with more than 400 staff worldwide.

Having been acquired in 2022 by private equity firm Gemspring, GoldenSource is in an exciting phase of investment and rapid growth. GoldenSource offers an international working environment, a positive corporate culture, the opportunity of professional development and attractive employee benefits.

Industry Recognition: GoldenSource consistently receives industry recognition and awards for a wider range of capabilities than any other firm in our space. The awards include Best Data Management Platform and Best Cloud-Based Data Management Solution.

Job description

The Compliance Manager in the SDAG (Security & Data Administration Group) team will play a crucial role in maintaining the confidentiality and integrity of our corporate and customer data within the organization. As a senior consultant audit oversight, information consolidation, validation and reporting will be key aspects of this role. Specializing in Data Privacy you will be able to foster a culture of data protection within the organization, being pro-active in promoting new ideas and assisting the existing team in this area.

Key Responsibilities

• Audit: Conduct internal audits as required across different departments and compliance areas. Assist and support the external audit function pertaining to both ISO and SOC compliance, including coordinating SOC1 and SOC2 reporting and liaising directly with our US-based external audit firm.
• Data Privacy Framework: Assist in developing and implementing data privacy framework including data protection policies, procedures in business processes, ensuring they align with legal standards and organizational objectives.
• Data Privacy Alignment: Stay abreast of legislative and regulatory developments for upcoming compliances (such as DORA, enhancements to GDPR etc) and also technological advancements and their implications on data privacy. Advise and assist in the building of strategies for company alignment with requisite agreed regulatory timelines.
• Cross-Functional Collaboration: Work collaboratively with the various internal departments to integrate data protection measures/compliances into business processes.
• Documentation and Record Keeping: Manage and maintain policy documents, comprehensive records of audit activities, steering committee decisions and action items and corrective actions etc.
• Planning: Work with the team to establish both short-term and long term plans to assist in the overall internal governance of Data Privacy and other activities worked on.
• Training and Awareness: Support the training department in conducting Information Security and data protection training sessions to enhance awareness and understanding of data privacy responsibilities among employees. Recommend complimentary training from existing training repositories that may help assist in the up-skilling of GoldenSource personnel.

Qualifications Skills required

• Have a working knowledge of ISO27701, ISO27018 or similar data privacy framework.
• Have worked as an auditor or within a function having direct experience of audit requirements and process (i.e.as an auditee), being able to clearly articulate the workflow and expectations.
• Demonstrable working experience of SOC2 reporting, including direct experience of working with a US-based audit firm on SOC2 examinations (Type I and/or Type II).
• Ability to prepare reports of analysis, internal audits and results to provide briefings to management.
• Excellent documentation skills (proof reading, preparing templates, updating and understanding technical, legal and legislative documents), experience of maintaining ISO Documentation or similar for an organization is a plus.
• Application skills to include MS Excel, Jira (or equivalent), MS PowerPoint, MS Word (or equivalent).
• Knowledge of any of the following ISO27001 ISMS, ISO22301 BCMS, SOC1& SOC2 would be beneficial.
• Excellent and assertive communication (Written & Spoken), interpersonal, and leadership skills.
• Self motivated and able to work within a team or alone as required from time to time to manage this function with the ability to work to deadlines and following up on audit findings to ensure timely closure.
• Ability to host meetings across departments to drive forward initiatives, increase standardization, consolidate documentation and assist in the build and maintenance of Best Practices.
• Identify use cases for process automation within the department and process improvement.
• 10 years of industry experience within software IT, audit or financial services.
• Minimum 4 years of experience working in compliance having project management experience as part of a function.
• Ability to conduct and manage BCP tests and fire drills is beneficial.