Cybersecurity & Compliance Advisor

Sourceo; Mumbai; On-site; INR 2,000,000 - 3,600,000; Full time

Job summary

Sourceo seeks a Cybersecurity & Compliance Advisor to strengthen governance, risk management, and compliance across business functions and digital solutions. You’ll translate complex security requirements into practical business outcomes while engaging stakeholders worldwide.

You will assess risks, define mitigations, support audits, and guide teams through cloud, OT and enterprise security programs, balancing security with productivity and innovation.

Qualifications

• Bachelor’s or Master’s degree in a relevant field and 5+ years in cybersecurity governance, risk or advisory roles.
• Strong knowledge of ISO 27001, NIST CSF, CIS Controls, IEC 62443, or equivalent standards.
• Experience supporting compliance programs for data privacy, cloud security, and regulatory requirements.
• Proven ability to communicate risk decisions to technical and non-technical stakeholders.
• Experience with enterprise security controls including IAM, data protection, monitoring, and incident response.

Responsibilities

• Develop and promote cybersecurity governance frameworks, policies, standards, and controls.
• Advise leaders on risks, compliance obligations, and security-by-design during transformation initiatives.
• Drive risk management programs and mitigate threats with pragmatic strategies.
• Support compliance roadmaps to improve security maturity and regulatory readiness.
• Evaluate cloud and application designs, and perform vendor security assessments.
• Collaborate with IT teams to implement controls for identity, data protection, network security, and monitoring.
• Lead security awareness, governance reviews, audits, and reporting across global teams.

Skills

Cybersecurity governance

Security risk management

Regulatory compliance

Security-by-design

Stakeholder management

Excellent communication

Education

Bachelor’s or Master’s degree in Cybersecurity / Information Security / CS / IT / Engineering

Tools

ServiceNow GRC

RSA Archer

MetricStream

Microsoft Defender

Azure Security Center

Splunk

QRadar

Job description

We are seeking a Cybersecurity & Compliance Advisor to strengthen cybersecurity governance, risk management, and compliance capabilities across business functions and digital solutions. The role will serve as a trusted advisor to business stakeholders, technology teams, and leadership by ensuring cybersecurity requirements, regulatory obligations, and corporate policies are effectively integrated into business operations and digital programs.

The Cybersecurity & Compliance Advisor will assess security risks, define mitigation strategies, support compliance initiatives, and guide teams through security assurance activities across cloud, enterprise, and operational technology environments. The position requires strong expertise in cybersecurity frameworks, security controls, risk management, and regulatory compliance, combined with the ability to translate technical requirements into practical business solutions.

This is a highly collaborative role requiring effective stakeholder engagement, governance leadership, and the ability to drive security awareness and compliance maturity across global and cross-functional teams.

A Snapshot of your Day

A typical day involves collaborating with project teams, solution architects, IT leaders, and business stakeholders to evaluate cybersecurity risks and compliance requirements for ongoing initiatives. You review security assessments, advise on remediation activities, and ensure controls align with enterprise standards and regulatory obligations.

You may participate in governance reviews, support audits, assess cloud and application security designs, and provide recommendations that enable secure business operations while balancing productivity, innovation, and risk management objectives.

How You’ll Make an Impact (responsibilities of role)

Strategic

• Develop and promote cybersecurity governance frameworks, policies, standards, and controls that align with business objectives and regulatory requirements.
• Advise business and technology leaders on cybersecurity risks, compliance obligations, and security-by-design principles during digital transformation initiatives.
• Drive cybersecurity risk management programs by identifying emerging threats, assessing business impact, and recommending pragmatic mitigation strategies.
• Support the development and execution of compliance roadmaps to improve organizational security maturity and regulatory readiness.
• Partner with stakeholders to establish security requirements for enterprise applications, cloud services, operational systems, and third-party solutions.
• Monitor cybersecurity trends, industry standards, and evolving regulations, ensuring the organization remains aligned with best practices and compliance expectations.
• Promote security awareness and foster a culture of accountability for cybersecurity and data protection throughout the organization.

Operational

• Conduct security risk assessments, control reviews, and compliance evaluations across applications, infrastructure, cloud environments, and operational processes.
• Support internal and external audits by coordinating evidence collection, control validation, remediation tracking, and compliance reporting.
• Review solution architectures, project designs, and implementation plan to identify security gaps and recommend appropriate controls.
• Perform vendor and third-party security assessments to evaluate cybersecurity posture and contractual compliance requirements.
• Collaborate with technical teams to implement security controls related to identity management, data protection, network security, monitoring, and incident response.
• Track cybersecurity findings, vulnerabilities, and compliance deviations while driving corrective and preventive actions.
• Support incident investigations, root cause analysis, and lessons learned activities from a governance and compliance perspective.
• Maintain cybersecurity documentation, risk registers, policy records, and compliance artifacts to support governance and auditability.

What You Bring (required qualification and skill sets)

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 5+ years of experience in cybersecurity, information security governance, compliance, risk management, or related advisory roles.
• Strong knowledge of cybersecurity frameworks and industry standards such such as ISO 27001, NIST Cybersecurity Framework, CIS Controls, IEC 62443, or equivalent.
• Experience supporting compliance programs related to data privacy, information security, cloud security, and regulatory requirements.
• Proven ability to conduct security risk assessments, define mitigation plans, and communicate risk decisions to technical and non-technical stakeholders.
• Experience working with enterprise security controls including identity and access management, data protection, security monitoring, vulnerability management, and incident response.
• Strong understanding of cloud security principles across Azure, AWS, or hybrid environments.
• Experience collaborating with global cross-functional teams and managing multiple stakeholders simultaneously.
• Excellent communication, presentation, documentation, and stakeholder management skills.
• Ability to balance security requirements with operational and business objectives while driving practical outcomes.

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, CCSP, or equivalent.
• Experience supporting cybersecurity requirements within industrial, energy, engineering, manufacturing, or critical infrastructure environments.
• Knowledge of Operational Technology (OT) security and industrial cybersecurity controls.
• Familiarity with data privacy regulations and compliance frameworks such as GDPR and related international standards.
• Experience with security governance platforms, GRC solutions, and audit management tools.
• Exposure to DevSecOps practices and secure software development lifecycle methodologies.
• Experience leading cybersecurity awareness initiatives, compliance assessments, or regulatory audits at enterprise scale.
• Governance, Risk & Compliance (GRC): ServiceNow GRC, RSA Archer, MetricStream, or similar platforms for risk management, control monitoring, and audit readiness.
• Cloud Security: Microsoft Azure Security Center, Microsoft Defender, AWS Security Services, and cloud governance solutions to manage security posture and compliance.
• Identity & Access Management: Microsoft Entra ID (Azure AD), Privileged Access Management, RBAC, and multi-factor authentication technologies.
• Security Monitoring & Threat Detection: SIEM and security analytics platforms such as Microsoft Sentinel, Splunk, QRadar, or equivalent solutions.
• Vulnerability & Risk Management: Tenable, Qualys, Rapid7, or similar solutions for vulnerability assessment, remediation tracking, and risk reporting.
• Compliance & Audit Management: Policy management, evidence collection, control testing, and regulatory reporting tools supporting governance activities.
• Collaboration & Reporting: Microsoft 365, Teams, SharePoint, Power BI, and ServiceNow for stakeholder engagement, reporting, and governance workflows.
• Methodologies & Frameworks: ISO 27001, NIST CSF, CIS Controls, IEC 62443, Risk Management Frameworks, and Security-by-Design principles.