Compliance Specialist

SQ1 Security Technology Private Limited; Chennai, Dadri, Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

SQ1 Security Technology Private Limited in Chennai is seeking a Compliance Specialist to strengthen information security, privacy, and regulatory compliance programs. You will document ISMS processes, coordinate audits, and track remediation efforts.

The role requires hands-on experience with ISO/IEC 27001, ISO/IEC 42001, PCI DSS, and SOC 2, plus strong risk and governance skills to align controls with contractual and regulatory requirements.

Qualifications

• 5–8 years of experience in information security compliance, GRC, or related role.
• Working knowledge of ISMS and ISO/IEC 27001; familiarity with ISO/IEC 42001, PCI DSS, SOC 2.
• Experience coordinating audits, evidence prep, gap assessments, and remediation tracking.

Responsibilities

• Maintain and improve ISMS, including policies, procedures, controls, and records.
• Coordinate risk assessments, SoA, and management review activities.
• Maintain compliance registers, control matrices, and evidence repositories.
• Support security awareness and communicate compliance requirements to stakeholders.
• Coordinate audits, prepare plans and evidence packs, track nonconformities and CAPAs.

Skills

Information security

GRC

Audit

Risk management

Leadership

Communication

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

ISO/IEC 27001 Lead Implementer/Lead Auditor

ISO/IEC 42001 / PCI DSS / SOC 2 related certifications

Job description

SQ1 Security Technology Private Limited | Full time

Compliance Specialist

Chennai, Noida, Bangalore, India | Posted on 09/23/2026

The Compliance Specialist is responsible for supporting andmanaging the organization’s information security, privacy, and regulatorycompliance activities. The role focuses on maintaining management systemdocumentation, coordinating audits and assessments, tracking correctiveactions, and helping ensure alignment with applicable standards and regulatoryrequirements.

Key Responsibilities

ISMS & Governance

• Maintainand continually improve the Information Security Management System (ISMS),including policies, procedures, controls, and records
  
• Coordinaterisk assessments, risk treatment plans, Statement of Applicability (SoA),and management review activities
  
• Maintaincompliance registers, control matrices, evidence repositories, anddocumented information
  
• Supportsecurity awareness initiatives and communicate compliance requirements torelevant stakeholders
  

Standards & Regulatory Compliance

• Supportimplementation, maintenance, and continual improvement of ISO/IEC27001-based ISMS requirements
  
• Demonstrateworking knowledge of ISO/IEC 42001 requirements for an ArtificialIntelligence Management System (AIMS), including AI governance and riskmanagement
  
• Coordinatecompliance activities for PCI DSS and SOC 2, including control mapping,evidence collection, gap assessments, and remediation tracking
  
• Interpretapplicable contractual, regulatory, and customer security requirements andmap them to internal controls
  

Audit & Assessment Management

• Coordinateinternal audits, external certification audits, surveillance audits, andcustomer assessments
  
• Prepareaudit plans, evidence packs, control narratives, and supportingdocumentation
  
• Tracknonconformities, observations, risks, and corrective and preventiveactions through closure
  
• Workwith control owners to validate evidence, address audit findings, anddemonstrate control effectiveness
  

Risk Management & Continuous Improvement

• Identifycompliance gaps and assess risks related to information security, privacy,AI governance, and applicable standards
  
• Maintainrisk registers, corrective action plans, compliance calendars, andperiodic review records
  
• Monitorchanges to standards and regulatory requirements and assess their impacton organizational controls
  
• Recommendpractical improvements to strengthen governance, documentation, andcontrol maturity
  

Stakeholder & Reporting Management

• Collaboratewith IT, security, HR, legal, engineering, and business teams to implementand evidence controls
  
• Preparecompliance status reports, audit updates, risk summaries, and managementreview inputs
  
• Actas a coordination point for auditors, customers, and internal stakeholderson compliance-related matters
  

Required Skills & Experience

• 5–8years of experience in information security compliance, GRC, audit, riskmanagement, or a related role
  
• Practicalexperience with ISMS and strong working knowledge of ISO/IEC 27001;knowledge or experience with ISO/IEC 42001, PCI DSS, and SOC 2 is required
  
• Experiencein audit coordination, evidence preparation, gap assessments, controlmapping, and remediation tracking
  

Preferred Qualifications

• Bachelor’sdegree in Information Technology, Cybersecurity, Computer Science, or arelated field
  
• Relevantcertifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor,ISO/IEC 42001, CISA, CISM, CRISC, CDPSE or PCI DSS-related qualifications
  
• Experiencemanaging security incidents and crisis situations
  
• Strongleadership, communication, and decision-making skills