Information Security And Compliance Associate

Datavail; Mumbai; On-site; INR 200,000 - 320,000; Full time

Job summary

Datavail is seeking an Information Security and Compliance Associate in Mumbai. The role supports ISO 27001, ISO 27701, and ISO 42001 programs by assisting in compliance monitoring, audits, and risk assessments.

You will work with ServiceNow GRC and collaborate across IT, HR, and business operations. Ideal for fresh graduates with an interest in security and governance, the position offers exposure to governance processes, dashboards, and reporting while developing practical controls and

Qualifications

• Fresh graduate or 0–1 year experience in information security, audit, or compliance.
• Familiarity with ISO 27001/27002, ISO 27701, ISO 42001 (AIMS) and related frameworks.
• Knowledge of security and audit standards is preferred.

Responsibilities

• Support compliance monitoring and audit activities aligned to ISO standards.
• Record and track audit tickets in ServiceNow GRC.
• Perform health checks of security tools and review alerts.
• Assist in risk assessments and third-party/vendor risk reviews.
• Prepare dashboards and metrics on compliance and security posture.
• Support reporting and continuous improvement efforts.

Skills

Information security

Audit

Compliance

Team collaboration

Communication skills

Attention to detail

Learning mindset

Education

Graduate in Computer Science or equivalent

Tools

ServiceNow GRC

Job description

Job Description:

Job Title: Information Security and Compliance Associate

Education: Any Graduate

Experience: 0 to 1year

Location: Mumbai

Reports to: Sr. Director – Information Security & Compliance

The Information Security and Compliance Associate will support the execution of Information Security, Privacy, and AI Management System (AIMS) programs aligned with ISO 27001, ISO 27701, and ISO 42001 standards. The role involves assisting in compliance monitoring, audit activities, and risk assessments using ServiceNow GRC and defined control frameworks. The associate will also support periodic reporting and ensure adherence to organizational policies and procedures.

Core Responsibilities

Compliance & Monitoring

• Conduct periodic compliance checks and update findings in line with defined policies and procedures.
• Record, track, and maintain audit/compliance tickets in ServiceNow GRC.
• Perform regular health checks of security tools and review daily alerts/events.
• Support ongoing monitoring of security controls across IT, HR, FM, and business operations.
• Participate in periodic control assessments mapped to ISO 27001, ISO 27701, and AIMS requirements.

Audit & Risk Support

• Assist in internal audits covering information security, privacy, and AI controls.
• Document audit observations, evidence, and status updates in ServiceNow GRC.
• Support enterprise risk assessment activities as per the defined risk management calendar.
• Assist in third-party/vendor risk assessments using established frameworks and tools.
• Security Operations Support
• Perform periodic reviews of key security domains such as Vulnerability Management, DLP, Endpoint Security, and SIEM.
• Proactively monitor and update security incidents, service requests, and compliance tickets.
• Assist in the preparation of dashboards and compliance/security metrics reporting.
• Reporting & Continuous Improvement
• Generate periodic reports and metrics for management on compliance and security posture.
• Identify opportunities to enhance reporting quality, control effectiveness, and process efficiency.

Skills and Experience

• Fresher or entry-level experience in Information Security, Audit, or Compliance.
• Basic understanding of IT systems, cybersecurity tools, and control environments.
• Familiarity with standards such as ISO 27001/27002, ISO 27701, ISO 42001 (AIMS), NIST, or PCI-DSS is preferred.

Key Attributes

• Strong interpersonal skills and ability to collaborate across teams.
• Effective verbal and written communication skills.
• High integrity and adherence to ethical standards.
• Ability to grasp technical and compliance concepts quickly.
• Strong learning mindset and attention to detail.
• Process-oriented with a focus on consistency and improvement.

Qualifications

• Graduate in Computer Science or equivalent field.
• Certifications or basic knowledge in security and audit standards (e.g., ISO 27001 LI/LA, ISO 27701, CISA – preferred but not mandatory).

About Us

Datavail is a leading provider of data management, application development, analytics, and cloud services, with more than 1,000 professionals helping clients build and manage applications and data via a world‑class tech‑enabled delivery platform and software solutions across all leading technologies. For more than 17 years, Datavail has worked with thousands of companies spanning different industries and sizes, and is an AWS Advanced Tier Consulting Partner, a Microsoft Solutions Partner for Data & AI and Digital & App Innovation (Azure), an Oracle Partner, and a MySQL Partner.

About The Team

Datavail’s Team of Oracle Experts Can Save You Time and Money

As an Oracle Platinum Partner with 17 specializations, we have extensive experience with everything Oracle. Our experts have an average of 16 years of experience. They’ve overcome every obstacle in helping clients manage everything from databases, BI analytics, reporting, migrations, and upgrades to monitoring and overall data management.

You can free up your IT resources to focus on growing your business rather than fighting fires. Our Oracle experts can guide you through strategic initiatives or support routine database management.

Datavail’s Comprehensive Oracle Database Services

Datavail offers Oracle consulting services that allow you to take advantage of all the features of the Oracle database. We can also assist you in designing, implementing, and managing a wide range of Oracle applications.

Oracle Database Managed Services

Datavail’s business focuses on helping you use your data to drive business results through cost‑saving services. The success of your business depends on how well you understand and manage your data. Our Oracle managed cloud services give you the power to unleash your organization’s potential. We provide comprehensive and technically advanced support for Oracle installations to ensure that your databases are safe, secure, and managed with the utmost level of care.

Our delivery performance in data management leads the industry. We offer highly trained Oracle database administrators via a 24×7, always on, always available, global delivery model. Datavail’s flexible and client focused services always add value to your organization. Our Oracle database managed services and products include: