Data Officer And Compliance Lead Information Security

IDfy; Mumbai; On-site; INR 3,500,000 - 5,200,000; Full time

Job summary

IDfy is seeking a senior Information Security leader with 10+ years in governance, risk, compliance, data privacy, and cloud security to join our Mumbai team.

You will work on ISO 27001:2022, SOC 2 Type II, RBI guidelines, data localization, and privacy-by-design across multi-cloud environments (AWS, GCP).

This role involves client-facing security conversations, auditor interactions, and mentoring a cross-functional team to drive secure, compliant solutions.

Qualifications

• 10+ years in Information Security with governance, risk, compliance, data privacy, and cloud security.
• Deep knowledge of ISO 27001:2022, SOC 2 Type II, and privacy regulations.
• Experience with RBI guidelines and data localization requirements.
• Ability to review cloud architectures and provide security design recommendations across multi-clouds (AWS, GCP).
• Strong client-facing skills for security conversations and auditor interactions.
• Proven track record mentoring and building security teams.

Responsibilities

• Lead the information security governance, risk, and compliance program.
• Collaborate with Engineering to shape secure cloud architectures across AWS and GCP.
• Articulate controls during audits and vendor engagements (MSAs, DPAs, RFPs, TPRM).
• Drive privacy program activities: DPIAs, consent management, data subject rights, breach notification.
• Balance regulatory requirements with business agility; translate requirements into actionable controls.
• Mentor and grow a cross-functional security team and partner with BFSI/fintech enterprise clients.

Skills

Governance

Risk Management

Compliance

Data Privacy

Cloud Security

ISO 27001

SOC 2

RBI Regulations

DPIAs

Data Localization

AI for Security

Job description

Job Description:

• 10+ years in Information Security, with a strong focus on Governance, Risk, Compliance, Data Privacy,
• and Cloud Security.
• Deep, working knowledge ofISO 27001:2022, SOC 2 Type II, ISO 42001, ISO/IEC 27701, India's DPDPA,
• RBIregulations (e.g.,V-CIP, outsourcing guidelines), and sector-specific requirements like SAR reporting
• and data localization.
• Asolid understanding of cloud security including the ability to contribute to cloud architecture reviews
• and offer security design recommendations across multi-cloud environments (AWS, GCP).
• Working fluency in application security, SIEM/SOC,VAPT, security & privacy by design, leveragingAIfor
• security - enough to be a credible partnerto Engineering.
• Strong privacy program exposure - DPIAs, consent management, data subjectrights handling, breach
• notification, and privacy-by-design.
• Genuine comfort with client-facing security conversations articulating controls, handling auditor scrutiny,
• and building trust withBFSI,fintech, and enterprise customers.
• Confidence reviewing MSAs, DPAs, RFPs, TPRM, DPIA,AI questionnaires, and aligning contractual
• obligations with internal security practices.
• The judgmentto balance compliance rigor with business agility, and the ability to translate complex
• regulatory requirements into practical, actionable controls.
• Acollaborative, cross-functional style, and experience building and mentoring a team.