Compliance Specialist

AuthBridge; Gurugram District; Presencial; INR 900.000 - 1.500.000; Jornada completa

Descripción de la vacante

AuthBridge in India is seeking a Compliance, Security and Regulatory Affairs professional with 3+ years of experience to shape, implement and monitor policies.

You will conduct internal and vendor audits, drive ISO standards, risk assessments, data privacy controls, and ensure adherence to GDPR, HIPAA, NIST, and other frameworks.

The role requires collaboration across functions to close audit observations, prepare management reviews, and maintain a robust control environment.

Formación

• Min. 3 years’ experience in Security, Privacy and Regulatory Compliances.
• Experience in global IT security and privacy standards.
• Experience implementing ISO 27001, 22301, NIST, GDPR, CCPA, HIPAA, etc.
• Experience documenting policies and procedures, templates and flow diagrams.
• Experience in Risk Management and business continuity audits.
• Knowledge of privacy laws and regulatory controls.

Responsabilidades

• Create, review, update policies and procedures and obtain approvals.
• Ensure policies align with customer agreements and applicable laws.
• Drive compliance to defined policies and procedures.
• Conduct proactive risk assessments and address open risks.
• Carry out regular internal audits to assess compliance.
• Take corrective actions to address audit findings.
• Work with other functions to implement controls and measure compliance.
• Analyze data and report on compliance levels and audit results.
• Monitor applicable laws and controls as business evolves.
• Conduct vendor audits and evaluate performance against standards.
• Lead end-to-end management system certification and policy implementation.

Conocimientos

Policy creation

Compliance auditing

Risk assessment

Internal audits

Regulatory compliance

Data analysis

IT security controls

Vendor audits

Educación

Bachelor's degree in Computer Science / Law / Information Security or related field

Descripción del empleo

• This involves creation, review, update Policy, Procedures and getting the approval.
• Ensuring policies are in line with compliances agreed with customers and applicable laws.
• Driving compliance to defined Policies and Procedures.
• Conducting proactive Risk Assessment & work on addressing open risks.
• Conducting Regular Internal Audits to assess the compliance levels.
• Taking corrective actions to address the findings/opportunities for improvement.
• Working on actions pertaining to client compliance requirements, audits and timely closure of audit observation.
• Working with other functions for implementation of controls and measuring the compliance level.
• Data Analysis and reporting on compliance levels, internal audit results, non-conformities, effectiveness of controls and corrective actions
• Proactive and ongoing monitoring & reporting of applicable law/ required controls as per changing business environment.
• Conducting vendor audits to evaluate the vendor performance and compliance with AuthBridge standards .
• Any other work/improvement projects for compliance, information security/privacy controls as per organization requirement.
• To manager end to end management system certification and implementation of policy and procedures throughout the organization
• Gathering, preparing the data and Facilitating management review meeting
• Quality – ISO9001 SOP/ Policies creation and update
• ISO Management- ISO document handling and ISO SPOC training, MRM
• Must have experience of Internal and External ISO Audits
• Involve in periodic Client Audits
• Initiate periodic Vendor Audits and prepare reports and followups for closure.
• Tasked with everything from developing company policies, creating metrics to help track compliance and performing compliance audits.
• Responsible for analysing the gaps, designing, and implementing the strategies to maintain internal and external compliances, security and privacy both, as per the overall business requirements
• Manage the client/ prospective client queries/ requirements to understand the IT security and privacy framework of the organization and head the audits conducted by the clients or external organizations
• Enabling organization in setting up global footprint while complying with policies and procedures governed by the local law.

Qualifications:

• Min. 3 years’ experience in Security, Privacy and Regulatory Compliances
• Experience in global standards for IT security and privacy compliances.
• Experience in implementing controls for ISO 27001, 22301, NIST, GDPR, CCPA, HIPPA etc.
• Experience in documenting policies and procedures, templates, flow diagrams.
• Experience in Risk Management, business continuity management and related audits.
• Exposure to Anti-Bribery and Anti-Corruption compliance
• Minimum Bachelor’s degree in Computer science, Law, Information Security or a related field or equivalent experience.
• Knowledge of different industry regulations, privacy /GDPR and associated technical controls
• Knowledge of Business Continuity Management System, Privacy controls, Internal/External Audits
• Keen and adept for research related to various regulations as per requirement and documentation of policy & procedures, process flows.
• Excellent communication and presentation skills