Executive - Process Compliance

Entrust Software & Services; Chennai District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Entrust Software & Services is seeking a Information Security Compliance professional in Chennai to support ISMS/PIMS implementation, audits, and risk management. You will coordinate evidence, maintain policies, and collaborate across IT, HR, Legal and Security teams to ensure ongoing compliance with ISO 27001/27701 and privacy requirements.

The role involves maintaining compliance records, supporting DPIA, SOC1/SOC2 activities and preparing dashboards for management review.

Qualifications

• Experience in Information Security Compliance, GRC, ISMS/PIMS, ISO 27001/ISO 27701 implementation or audit coordination.
• Experience in SOC1/SOC2 audit coordination is an advantage.
• Hands-on knowledge of data protection, DPIA and privacy compliance requirements.

Responsibilities

• Support ISMS and PIMS implementation, maintenance and continual improvement per ISO/IEC 27001 and ISO/IEC 27701.
• Coordinate ISO 27001 and ISO 27701 internal and external audits, including planning and evidence collection.
• Support SOC 1 and SOC 2 audit activities by coordinating evidence collection and documentation.
• Maintain policies, procedures, SOPs and compliance records.
• Assist risk assessments, Risk Register updates, SoA maintenance and CAPA tracking.
• Coordinate PIMS activities including PII inventory, DPIA coordination and privacy controls.
• Track compliance activities and prepare periodic reports and dashboards.
• Collaborate with IT, HR, Operations, Legal, Privacy and other stakeholders for evidence and assessments.
• Assist in maintaining audit evidence in repositories like SharePoint.
• Support awareness and training on information security and privacy standards.
• Monitor changes in standards and regulations for necessary updates.

Skills

Information Security

GRC

ISMS

PIMS

ISO 27001/27701

Audit coordination

Risk assessment

PII management

DPIA

Policy & SOP maintenance

MS Office (Excel, Word, PPT)

Tools

SharePoint

Job description

Role & responsibilities

• Support the implementation, maintenance and continual improvement of the organization's ISMS and PIMS in accordance with applicable ISO/IEC 27001 and ISO/IEC 27701 requirements.
• Coordinate ISO 27001 and ISO 27701 internal and external audit activities, including audit planning, evidence collection, documentation and follow-up.
• Support SOC 1 and SOC 2 audit activities by coordinating evidence collection, control documentation and audit queries with relevant stakeholders.
• Maintain and update policies, procedures, SOPs, process narratives, control documents and compliance records.
• Support information security and privacy risk assessments, Risk Register updates, Statement of Applicability (SoA) maintenance and risk treatment activities. Coordinate audit findings, observations, Root Cause Analysis (RCA), Corrective Action Plans (CAPA) and closure tracking.
• Support PIMS activities including PII inventory, PII classification, DPIA coordination, privacy control implementation and evidence management.
• Track compliance activities, audit actions and control implementation status and prepare periodic compliance reports and dashboards.
• Coordinate with IT, HR, Operations, Legal, Information Security, Privacy and other business stakeholders for compliance requirements and audit evidence. Support customer, vendor and third-party security/privacy questionnaires and compliance assessments.
• Assist in maintaining compliance records and audit evidence in designated repositories such as SharePoint.
• Support awareness and compliance training activities related to information security, privacy and applicable standards.
• Monitor changes in applicable standards, regulatory requirements and organizational policies and support necessary updates.

Preferred candidate profile

• 2 to 5 years of relevant experience in Information Security Compliance, GRC, ISMS/PIMS, ISO 27001/ISO 27701 implementation or audit coordination.
• Experience in SOC 1/SOC 2 audit coordination will be an added advantage.
• Good working knowledge of ISO/IEC 27001:2022 and ISO/IEC 27701. Practical experience in ISMS/PIMS implementation, maintenance and audit coordination.
• Working knowledge of SOC 1 and SOC 2 audit requirements and evidence management.
• Experience in risk assessment, Risk Register, risk treatment plans and Statement of Applicability (SoA).
• Experience in preparing and maintaining information security/privacy policies, procedures, SOPs and process documentation.
• Experience in audit evidence collection, compliance tracking, Root Cause Analysis (RCA), Corrective and Preventive Actions (CAPA), and audit finding closure.
• Basic understanding of data protection, PII management, DPIA and privacy compliance requirements.
• Good knowledge of Microsoft Office, particularly Excel, Word and PowerPoint; working knowledge of SharePoint is desirable.
• Ability to coordinate with cross-functional teams and manage multiple compliance activities and deadlines.
• ISO 27001/ISO 27701 certification or relevant professional certification will be an added advantage.