Manager IT Governance & Compliance

Sabpaisa; Delhi; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Sabpaisa is seeking an experienced Manager IT Governance & Compliance in Delhi, India. The role involves driving information security initiatives, risk management, and ensuring compliance with regulatory frameworks such as ISO 27001 and PCI-DSS. Key responsibilities include managing compliance programs, assessing information security frameworks, and collaborating with stakeholders. The ideal candidate should possess strong documentation and communication skills. Join us to strengthen our security posture and compliance efforts.

Qualifications

• Strong understanding of compliance frameworks like ISO 27001 and PCI-DSS.
• Experience in developing information security policies and processes.
• Excellent communication and documentation skills.

Responsibilities

• Manage Information Security Compliance and Risk programs.
• Implement security programs and governance structures.
• Collaborate with teams for compliance with industry standards.

Skills

ISO 27001

PCI-DSS

RBI compliance

IT governance frameworks

Risk management

Communication skills

Stakeholder management

Job description

We are looking for an experienced Manager IT Governance & Compliance to drive our information security, risk management, and compliance initiatives. The ideal candidate should have hands‑on experience in implementing security frameworks, conducting audits, and ensuring alignment with regulatory requirements.

Key Responsibilities

• Support and manage Information Security Compliance, Risk, and Audit programs across the organization.
• Assess, design, develop, and implement Information Security programs, including governance structures, policies, standards, processes, and procedures.
• Ensure timely communication to stakeholders regarding compliance requirements, audit findings, risks, and security‑related activities.
• Collaborate with business teams, technical teams, external vendors, and auditors to ensure compliance with industry standards and regulatory frameworks such as ISO 27001, PCI DSS, RBI guidelines, etc.
• Review, update, and maintain security documentation, SOPs, and audit evidence to ensure continuous compliance.
• Monitor security controls and support internal/external audits to close gaps and implement corrective actions.
• Identify risks and recommend mitigation measures to strengthen the organization’s security posture.

Qualifications

• Strong understanding of ISO 27001, PCI‑DSS, RBI compliance, IT governance frameworks, and risk management practices.
• Experience in developing information security policies, SOPs, and process documents.
• Knowledge of IT audits, vendor assessments, and security controls.
• Excellent communication, documentation, and stakeholder management skills.
• Ability to work cross‑functionally and manage compliance requirements end‑to‑end.