Lead Compliance Specialist

TAC Security; Chandigarh; On-site; INR 2,600,000 - 3,200,000; Full time

Job summary

TAC Security in Chandigarh, India, seeks a Lead Compliance Specialist to lead our information security compliance program across global standards. You will collaborate with engineering, IT, HR, Legal, Product, and Operations to implement, monitor, and improve controls and governance.

The role requires hands-on experience with ISO 27001, SOC 2, GDPR, HIPAA, PCI DSS, and NIST, plus strong audit management and policy development skills. You will mentor juniors and drive security awareness.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 6+ years of experience in Information Security, GRC, or Cybersecurity Compliance.
• Hands-on experience with ISO 27001 and SOC 2 compliance programs.
• Experience with GDPR, HIPAA, PCI DSS, and NIST.
• Excellent documentation, communication, and stakeholder management skills.

Responsibilities

• Lead the implementation and ongoing improvement of the organization's compliance programs.
• Coordinate internal and external audits and certifications.
• Develop, review, and maintain information security policies, standards, and procedures.
• Conduct risk assessments, gap analyses, and remediation tracking.
• Collaborate with engineering, IT, HR, Legal, Product, and Ops to implement controls.
• Drive security questionnaires and due diligence activities with customers.
• Monitor regulatory changes and update programs accordingly.
• Mentor junior compliance professionals and promote security awareness.

Skills

GRC

Security Audits

Regulatory Compliance

Vendor Risk

Cloud Security

Education

Bachelors in CS/IT/Cybersecurity

Tools

AWS

Azure

GCP

Job description

Position Summary

We are seeking a highly motivated and experienced Lead Compliance Specialist to lead and strengthen our organization's compliance framework. The ideal candidate will have extensive experience in information security compliance, regulatory requirements, audit management, and governance practices. This role will work closely with internal stakeholders, customers, auditors, and leadership to ensure compliance with global standards and continuously improve the organization's security and compliance posture.

Key Responsibilities

• Lead the implementation, maintenance, and continuous improvement of the organization's compliance programs.
• Manage compliance with international standards and regulatory frameworks, including:
• ISO/IEC 27001
• SOC 2 Type II
• GDPR
• HIPAA
• PCI DSS
• NIST Cybersecurity Framework
• ISO 27701 (preferred)
• Plan, coordinate, and manage internal and external compliance audits.
• Develop, review, and maintain information security policies, standards, procedures, and control documentation.
• Conduct risk assessments, gap analyses, and remediation tracking.
• Partner with engineering, IT, HR, Legal, Product, and Operations teams to implement and monitor security controls.
• Drive customer security assessments, compliance questionnaires, and due diligence activities.
• Monitor changes in regulatory and cybersecurity requirements and recommend necessary updates.
• Manage evidence collection and documentation for audits and certifications.
• Lead vendor and third-party security compliance assessments.
• Establish compliance metrics, dashboards, and executive reporting.
• Mentor and guide junior compliance professionals while promoting a strong culture of security and compliance.
• Support security awareness initiatives and compliance training across the organization.
• Collaborate with leadership to align compliance initiatives with business objectives.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 610+ years of experience in Information Security, Governance, Risk & Compliance (GRC), or Cybersecurity Compliance.
• Strong understanding of information security principles and risk management.
• Hands-on experience managing ISO 27001 and SOC 2 compliance programs.
• Experience with regulatory frameworks such as GDPR, HIPAA, PCI DSS, and NIST.
• Experience leading compliance audits from planning through successful certification.
• Excellent documentation, communication, and stakeholder management skills.
• Strong analytical and problem-solving abilities.
• Experience working with cloud security environments (AWS, Azure, or GCP) is preferred.

Preferred Certifications

• ISO/IEC 27001 Lead Implementer
• ISO/IEC 27001 Lead Auditor
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Privacy Professional (CIPP)
• CCSK or CCSP (preferred)

Technical Skills

• Governance, Risk & Compliance (GRC)
• Security Audits & Assessments
• Risk Management
• Internal Controls
• Policy Development
• Vendor Risk Management
• Security Questionnaires
• Compliance Documentation
• Audit Readiness
• Cloud Security Compliance
• Regulatory Compliance
• Security Awareness Programs .