Compliance Specialist

SQ1 Security; Chennai; On-site; INR 900,000 - 1,400,000; Full time

Job summary

SQ1 Security is seeking a Compliance Specialist to support and manage information security, privacy, and regulatory compliance activities. The role focuses on maintaining management system documentation, coordinating audits, tracking corrective actions, and ensuring alignment with standards and regulatory requirements.

The candidate will coordinate ISMS processes, risk assessments, evidence repositories, and control mappings, while collaborating with IT, legal, and business teams to evidence

Qualifications

• 5–8 years of information security compliance, GRC, audit, risk management, or related role.
• Experience with ISMS and ISO/IEC 27001; knowledge of ISO/IEC 42001, PCI DSS, SOC 2.
• Experience coordinating audits, evidence preparation, gap assessments, control mapping, and remediation tracking.

Responsibilities

• Maintain and continually improve the ISMS, including policies, procedures, controls, and records.
• Coordinate risk assessments, risk treatment plans, SoA, and management review activities.
• Maintain compliance registers, control matrices, evidence repositories, and documented information.
• Support security awareness initiatives and communicate compliance requirements to stakeholders.
• Support implementation and continual improvement of ISO/IEC 27001-based ISMS requirements.
• Coordinate compliance activities for PCI DSS and SOC 2, including control mapping and remediation tracking.
• Interpret contractual, regulatory, and customer security requirements and map them to internal controls.
• Coordinate internal and external audits, prepare audit plans and evidence packs, and track findings and corrective actions.

Skills

GRC

ISMS

Audit coordination

Risk management

Regulatory compliance

ISO/IEC 27001

ISO/IEC 42001

PCI DSS

SOC 2

Education

Bachelor's degree in IT/Cybersecurity/CS

Job description

Job Description:

Job Title: Compliance Specialist

Experience: 5–8 years

Role Overview

The Compliance Specialist is responsible for supporting and managing the organization’s information security, privacy, and regulatory compliance activities. The role focuses on maintaining management system documentation, coordinating audits and assessments, tracking corrective actions, and helping ensure alignment with applicable standards and regulatory requirements.

Key Responsibilities

ISMS & Governance

• Maintain and continually improve the Information Security Management System (ISMS), including policies, procedures, controls, and records
• Coordinate risk assessments, risk treatment plans, Statement of Applicability (SoA), and management review activities
• Maintain compliance registers, control matrices, evidence repositories, and documented information
• Support security awareness initiatives and communicate compliance requirements to relevant stakeholders

Standards & Regulatory Compliance

• Support implementation, maintenance, and continual improvement of ISO/IEC 27001-based ISMS requirements
• Demonstrate working knowledge of ISO/IEC 42001 requirements for an Artificial Intelligence Management System (AIMS), including AI governance and risk management
• Coordinate compliance activities for PCI DSS and SOC 2, including control mapping, evidence collection, gap assessments, and remediation tracking
• Interpret applicable contractual, regulatory, and customer security requirements and map them to internal controls

Audit & Assessment Management

• Coordinate internal audits, external certification audits, surveillance audits, and customer assessments
• Prepare audit plans, evidence packs, control narratives, and supporting documentation
• Track nonconformities, observations, risks, and corrective and preventive actions through closure
• Work with control owners to validate evidence, address audit findings, and demonstrate control effectiveness

Risk Management & Continuous Improvement

• Identify compliance gaps and assess risks related to information security, privacy, AI governance, and applicable standards
• Maintain risk registers, corrective action plans, compliance calendars, and periodic review records
• Monitor changes to standards and regulatory requirements and assess their impact on organizational controls
• Recommend practical improvements to strengthen governance, documentation, and control maturity

Stakeholder & Reporting Management

• Collaborate with IT, security, HR, legal, engineering, and business teams to implement and evidence controls
• Prepare compliance status reports, audit updates, risk summaries, and management review inputs
• Act as a coordination point for auditors, customers, and internal stakeholders on compliance-related matters

Required Skills & Experience

• 5–8 years of experience in information security compliance, GRC, audit, risk management, or a related role
• Practical experience with ISMS and strong working knowledge of ISO/IEC 27001; knowledge or experience with ISO/IEC 42001, PCI DSS, and SOC 2 is required
• Experience in audit coordination, evidence preparation, gap assessments, control mapping, and remediation tracking

Preferred Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field
• Relevant certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor, ISO/IEC 42001, CISA, CISM, CRISC, CDPSE or PCI DSS-related qualifications
• Experience managing security incidents and crisis situations
• Strong leadership, communication, and decision-making skills