Security and Compliance

Getvisitapp; Dadri; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Getvisitapp is seeking a Security and Compliance Manager in Dadri, Uttar Pradesh, to oversee security frameworks, ensure compliance with regulations like ISO 27001 and GDPR, and lead audits. The role entails developing security policies, conducting risk assessments, and coordinating with legal and IT teams. The ideal candidate will promote a security-first culture within the company while staying updated on new regulations and trends. This position is crucial for safeguarding sensitive information and mitigating risks.

Qualifications

• Experience in developing and implementing security policies and guidelines.
• Proven track record in conducting risk assessments and security audits.
• Strong understanding of industry regulations like ISO 27001, HIPAA, GDPR.

Responsibilities

• Oversee and enhance security frameworks and risk management initiatives.
• Ensure adherence to industry regulations and implement security best practices.
• Lead internal and external security audits, managing relationships with auditors.

Skills

Security policies development

Risk assessments

Compliance with regulations

Incident response planning

Data protection mechanisms

Security awareness training

Job description

Job Summary:

We are looking for a Security and Compliance Manager to oversee and enhance our security frameworks, regulatory compliance, and risk management initiatives. The ideal candidate will ensure adherence to industry regulations, implement security best practices, and lead audits to maintain compliance with international standards.

Key Responsibilities:

Security Governance & Risk Management:

Develop and implement security policies, standards, and guidelines.

Conduct risk assessments and security audits to identify vulnerabilities and mitigate risks.

Collaborate with IT and legal teams to ensure secure infrastructure and data protection.

Monitor emerging security threats and recommend appropriate countermeasures.

Regulatory Compliance & Audits:

Ensure compliance with industry regulations such as ISO 27001, HIPAA, GDPR, SOC 2, PCI-DSS, NIST, and others.

Lead internal and external security audits, managing relationships with auditors and regulators.

Develop compliance reports and maintain documentation for audits and assessments.

Educate internal teams on compliance requirements and security best practices.

Data Protection & Privacy:

Implement and maintain data protection policies to safeguard sensitive information.

Work with legal and IT teams to ensure compliance with global privacy laws (e.g., GDPR, CCPA).

Conduct Data Protection Impact Assessments (DPIAs) and oversee incident response plans.

Develop and maintain incident response plans and security monitoring mechanisms.

Lead investigations into security incidents, breaches, and compliance violations.

Coordinate with cybersecurity teams to implement security controls and remediation strategies.

Conduct security awareness training for employees to promote a security-first culture.

Stay updated on new regulations and industry trends to proactively adapt policies.