Compliance Specialist

SecqureOne; Dadri; On-site; INR 1,200,000 - 2,100,000; Full time

Benefits offered by this job

Full-time employment

Job summary

SecqureOne is seeking a Compliance Specialist in Tamil Nadu with 5+ years of experience in information security compliance. You will manage the ISMS, coordinate audits, and track remediation while aligning with ISO/IEC 27001, PCI DSS, and SOC 2 requirements.

The role involves risk management, evidence collection, and collaboration with IT, security, HR, legal, and engineering teams to ensure regulatory compliance and security governance. Full-time position based in Tamil Nadu, India.

Qualifications

• Minimum 5–8 years in information security compliance, audits, or risk management.
• Strong knowledge of ISMS and ISO/IEC 27001; familiarity with ISO/IEC 42001, PCI DSS, and SOC 2.
• Experience coordinating audits, evidence collection, gap assessments, and remediation tracking.

Responsibilities

• Maintain and continually improve the ISMS, including policies, controls, records; coordinate risk assessments, SoA, and management reviews.
• Support implementation and continual improvement of ISO/IEC 27001-based ISMS requirements; map contractual/regulatory requirements to controls.
• Coordinate internal audits, external certification audits, and customer assessments; prepare plans, evidence packs, and narratives.
• Identify compliance gaps and monitor changes to standards; recommend improvements to governance and documentation.
• Collaborate with IT, security, HR, legal, and engineering to evidence controls and report status.

Skills

InfoSec compliance

GRC

Audit experience

Risk management

Education

Bachelor's degree (IT/Cybersecurity/CS)

Tools

ISO/IEC 27001

ISO/IEC 42001

PCI DSS

SOC 2

Job description

Job Summary

Job Title: Compliance Specialist

Experience: 5-8 years

The Compliance Specialist is responsible for supporting and managing the organization information security, privacy, and regulatory compliance activities. The role focuses on maintaining management system documentation, coordinating audits and assessments, tracking corrective actions, and helping ensure alignment with applicable standards and regulatory requirements.

Responsibilities

• ISMS & Governance: Maintain and continually improve the Information Security Management System (ISMS), including policies, procedures, controls, and records; Coordinate risk assessments, risk treatment plans, Statement of Applicability (SoA), and management review activities; Maintain compliance registers, control matrices, evidence repositories, and documented information; Support security awareness initiatives and communicate compliance requirements to relevant stakeholders.


• Standards & Regulatory Compliance: Support implementation, maintenance, and continual improvement of ISO/IEC 27001-based ISMS requirements; Demonstrate working knowledge of ISO/IEC 42001 requirements for an Artificial Intelligence Management System (AIMS), including AI governance and risk management; Coordinate compliance activities for PCI DSS and SOC 2, including control mapping, evidence collection, gap assessments, and remediation tracking; Interpret applicable contractual, regulatory, and customer security requirements and map them to internal controls.


• Audit & Assessment Management: Coordinate internal audits, external certification audits, surveillance audits, and customer assessments; Prepare audit plans, evidence packs, control narratives, and supporting documentation; Track nonconformities, observations, risks, and corrective and preventive actions through closure; Work with control owners to validate evidence, address audit findings, and demonstrate control effectiveness.


• Risk Management & Continuous Improvement: Identify compliance gaps and assess risks related to information security, privacy, AI governance, and applicable standards; Maintain risk registers, corrective action plans, compliance calendars, and periodic review records; Monitor changes to standards and regulatory requirements and assess their impact on organizational controls; Recommend practical improvements to strengthen governance, documentation, and control maturity.


• Stakeholder & Reporting Management: Collaborate with IT, security, HR, legal, engineering, and business teams to implement and evidence controls; Prepare compliance status reports, audit updates, risk summaries, and management review inputs; Act as a coordination point for auditors, customers, and internal stakeholders on compliance-related matters.

Required Skills & Experience

• 5-8 years of experience in information security compliance, GRC, audit, risk management, or a related role


• Practical experience with ISMS and strong working knowledge of ISO/IEC 27001; knowledge or experience with ISO/IEC 42001, PCI DSS, and SOC 2 is required


• Experience in audit coordination, evidence preparation, gap assessments, control mapping, and remediation tracking

Preferred Qualifications

• Bachelor degree in Information Technology, Cybersecurity, Computer Science, or a related field


• Relevant certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor, ISO/IEC 42001, CISA, CISM, CRISC, CDPSE or PCI DSS-related qualifications


• Experience managing security incidents and crisis situations


• Strong leadership, communication, and decision‑making skills

Job Type

Full time

Location

Tamil Nadu, India