Lead - Risk & Compliance

ATAIN; Gurugram District; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

ATAIN is seeking a Job Description Lead - Risk & Compliance to conduct audits, drive ISO 27001/9001 and PCI DSS initiatives, and establish risk governance practices. The role involves collaborating with process owners, preparing dashboards, and presenting updates to leadership and clients. Travel to other operational sites is required.

The candidate should have 2–5 years in risk, compliance, or related fields, with certifications like CISA/CIA/CAMS as advantageous.

Qualifications

• Graduate in any discipline with 2–5 years of risk, compliance, or related experience.

Responsibilities

• Conduct audits across processes for contractual and regulatory compliance.
• Lead ISO 27001/9001 and PCI DSS implementation and certification.

Skills

Analytical skills

Investigative skills

Risk management

Internal controls

Audit & compliance

Information security

Data protection

Communication skills

Policy interpretation

Reporting

Stakeholder management

Time management

MS Office

Education

Graduate degree

Tools

ISO 27001

ISO 9001

PCI DSS

CISA

CIA

CAMS

Job description

Job Description Lead - Risk & Compliance

Job Responsibilities

• Conduct contractual and client-specific audits across business processes to assess adherence to defined contractual, regulatory, and organizational requirements.
• Conduct detailed internal audits for the BPO vertical, covering ISO 27001, ISO 9001, data protection and information security requirements.
• Support and drive the implementation, maintenance and certification requirements for ISO 27001, ISO 9001, and PCI DSS.
• Collaborate with process owners to identify audit gaps, define corrective actions and drive timely closure of audit findings.
• Establish and maintain a regular Risk & Compliance (R&C) governance cadence with business leaders, including dashboards, reports, and management reviews.
• Analyze operational and compliance data to identify trends, recurring issues, emerging risks, and control weaknesses, and incorporate relevant insights into management reports.
• Proactively identify process improvement opportunities and recommend appropriate controls to mitigate operational, compliance, information security, and other business risks.
• Participate in client calls, meetings, and governance reviews and present R&C-related updates during weekly, monthly, and ad-hoc client interactions.
• Independently conduct fraud and financial irregularity investigations, using appropriate investigation techniques, evidence-gathering methodologies, and analytical approaches.
• Prepare comprehensive investigation reports covering the background, methodology, findings, root cause, financial impact, control gaps, and recommended corrective actions.
• Develop, implement and maintain processes, policies, and controls under the Privacy and Security Management System to support compliance with applicable data protection requirements.
• Support periodic risk and control assessments, including identification, assessment, documentation, and monitoring of key risks and controls.
• Maintain risk registers and track mitigation plans, control gaps and remediation activities through to closure.
• Monitor adherence to internal policies, procedures, contractual obligations, and applicable regulatory requirements.
• Conduct compliance reviews, control testing and ongoing monitoring activities to assess the effectiveness of established controls.
• Prepare risk and compliance dashboards, management reports, presentations, and other governance materials for leadership and clients.
• Maintain accurate and up-to-date documentation relating to policies, procedures, controls, audits, risk assessments, investigations, and compliance activities.
• Identify and elevate material risk, compliance, control, or policy concerns to relevant stakeholders in a timely manner.
• Partner with business and support functions to strengthen internal controls, improve processes, and enhance the overall risk and compliance environment.
• Support risk, compliance, information security, data privacy, and ethics awareness/training initiatives across the organization.
• Stay informed of relevant regulatory developments, industry practices, and changes to applicable standards and incorporate them into the organization’s risk and compliance framework where required.

Skills & Competencies

• Strong analytical, investigative, and problem-solving capabilities.
• Good understanding of risk management, internal controls, audit, compliance, information security, and data protection principles.
• Working knowledge of ISO 27001, ISO 9001, PCI DSS, and data protection requirements.
• Strong attention to detail with the ability to analyze large volumes of information and identify trends and exceptions.
• Excellent written and verbal communication skills, with the ability to present findings and recommendations to senior stakeholders and clients.
• Ability to interpret policies, procedures, contracts, regulatory requirements, and control frameworks.
• Strong report-writing and documentation skills.
• Good organizational and time-management skills, with the ability to manage multiple audits, investigations, and compliance activities simultaneously.
• Proficiency in Microsoft Excel, PowerPoint and Word, strong data analysis and presentation skills will be an advantage.
• Ability to handle confidential and sensitive information with a high degree of integrity and professionalism.
• Strong stakeholder-management and collaboration skills.
• Proactive approach to identifying risks, control weaknesses, and process improvement opportunities.
• Willingness to travel to other operational sites for audit, compliance, investigation, and Risk & Compliance activities.

Qualifications & Experience

• Graduate in any discipline from a recognized university/institution.
• 2-5 years of relevant experience in Risk & Compliance, Internal Audit, Operational Risk, Information Security, Data Privacy, Fraud Investigation or related functions.
• Experience in a BPO/operations environment will be preferred.
• Relevant certifications such as CISA, CIA, CAMS, FRM, ISO 27001/ISO 9001 Lead Auditor/Implementer, or other compliance-related certifications will be an advantage.
• Travel industry/domain knowledge will be preferred.
• Candidates should be willing to travel to other operational sites as required for Risk & Compliance activities.
• This role will be office/site-based and will require regular interaction with operational and support teams.