Control Advisor

Equiniti; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work model

Cab pickup/drop-off

Job summary

Equiniti Bengaluru-based role focuses on leading the organization\'s information security compliance program, audits, risk management, and evidence collection. You will act as a trusted advisor to the business, promoting risk-based decisions and continuous control improvements.

The role covers compliance management for ISO 27001, SOC 2, GDPR, DORA, and related standards, with hybrid work from The Leela Office, Bangalore. Candidates should have 3-4 years in GRC, IT audit, or security assurance.

Qualifications

• Experience with information security compliance programs and audits.
• Strong knowledge of ISO 27001, SOC 2, GDPR, and related standards.
• Ability to coordinate audits, collect evidence, and track findings.

Responsibilities

• Lead audits and maintain information security compliance programs with policy alignment.
• Monitor risks, conduct risk assessments, and support risk register maintenance.
• Prepare governance reports and KPIs for management and stakeholders.
• Respond to customer security questionnaires and regulatory inquiries.

Skills

Audit coordination

Risk assessment

Stakeholder management

Security governance

GRC frameworks

Documentation

Policy reviews

Education

Bachelor's degree in Information Security / IT / Risk Management

Tools

Drata

Archer

LogicGate

ServiceNow GRC

Microsoft 365

Word

Excel

Job description

Management Level H Basic Function Support the organization's information security compliance program by leading audits, regulatory compliance initiatives, control assessments, risk management activities, and evidence collection. Act as a trusted advisor to the business, promoting risk-based decision-making, compliance awareness, control maturity, and process improvement.

Key Responsibilities

• Compliance & Audit Management Lead and maintain information security compliance programs aligned with corporate policies and regulatory requirements. Support and manage audits and compliance frameworks such as ISO 27001, SOC 2, GDPR, DORA, FISMA, and related standards. Serve as a subject matter expert on security and compliance matters. Plan and execute framework audits, collect and validate evidence, perform control testing, and assess procedural compliance. Identify, document, and track audit findings, remediation plans, and control improvements. Partner with business and technology teams to ensure successful audit outcomes and ongoing compliance. Maintain knowledge of business systems, processes, regulations, and industry best practices.
• Risk Management Monitor emerging security, privacy, and regulatory risks affecting the business. Conduct risk assessments and support risk register maintenance and treatment activities. Evaluate and score risks related to audit findings, exceptions, and attestations. Monitor, report, and elevate identified risks while driving remediation to acceptable risk levels. Collaborate with stakeholders to ensure risk exposure remains within approved tolerances.
• Security Governance & Reporting Monitor compliance with security standards and controls. Review security metrics, compliance KPIs, and governance reports. Support security awareness and compliance initiatives. Prepare compliance and risk reports for management and key stakeholders.
• Stakeholder & Customer Support Respond to customer security questionnaires, due diligence requests, and regulatory inquiries. Build strong relationships with internal and external stakeholders. Provide timely issue resolution, recommendations, and process improvements. Support projects from planning through completion, including reporting and recommendations.

Required Qualifications

• Experience 3-4 years of experience in: Information Security Cybersecurity Compliance Governance, Risk & Compliance (GRC) IT Audit or Security Assurance
• Compliance & Risk Knowledge Strong understanding of: ISO 27001 SOC 2 NIST Cybersecurity Framework GDPR Risk Management methodologies Technical Knowledge Working knowledge of:
• Identity & Access Management (IAM) Multi-Factor Authentication (MFA) Vulnerability Management Logging & Monitoring Cloud Security fundamentals (Azure, AWS, GCP) Secure Change Management Data Protection & Encryption
• Core Skills Audit coordination and evidence management Risk assessment and control testing Policy and procedure reviews Compliance reporting and documentation Stakeholder management and communication
• Tools Experience with: Microsoft 365 Word and Excel (reporting and analysis) SharePoint / OneDrive GRC platforms such as Drata, Archer, LogicGate, or ServiceNow GRC
• Education Bachelor's degree in information security, Computer Science, IT, Risk Management, or a related field.

Preferred Qualifications

• Certifications ISO 27001 Internal Auditor or Lead Auditor Security+ Certified in Cybersecurity (CC) CISA
• Additional Knowledge DORA, CCPA, NYDFS Azure Defender / Security Center AWS Security Services Compliance metrics and KPI reporting Soft Skills Executive presentations Project management Process improvement Training and coaching Cross-functional collaboration

Location

This role will be based out of The Leela Office located on the 4th Floor, Airport Road, Kodihalli, Bangalore- 560008. Work Timing : 1 pm to 10 pm IST. Cab Pick-up and drop available. Hybrid : Our expectation at this time, is that you would work from our office on Tuesdays, Wednesdays, Thursdays with flexibility to work from home on Mondays and Fridays.

We are committed to equality of opportunity for all staff and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships. Please note any offer of employment is subject to satisfactory pre-employment screening checks.

Equiniti is a global fintech that connects the future of capital, communications, and governance, building trust and confidence in every market we serve. With more than 5,000 employees supporting over 20 million shareholders and 15,000 organizations worldwide, our mission is to digitize and modernize every aspect of shareholder interaction. Equiniti is uniquely positioned as the only global technology partner serving both investor relations and public relations professionals, creating a powerful platform at the intersection of reputation, disclosure, and engagement.