Security Compliance Lead

Infiniti Software Solutions Pvt Ltd.; Chennai; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Infiniti Software Solutions Private Limited is seeking a Security and Compliance Lead in Chennai to manage security, risk, and compliance programs. You will ensure adherence to SOC 2, ISO 27001, PCI DSS, GDPR, and privacy regulations while guiding responsible AI use across the organization.

The role focuses on governance, incident response, data protection, and AI governance controls, collaborating with engineering, data science, and legal teams to protect sensitive data and support AI

Qualifications

• Strong knowledge of SOC 2, ISO 27001, PCI DSS, GDPR and data protection principles.
• Understanding of AI governance, AI risks, and regulatory trends.
• Experience with VAPT, audit processes, and cybersecurity operations.
• Ability to collaborate across engineering, data science, and legal teams.
• Strong documentation and communication skills.

Responsibilities

• Develop, implement, and maintain security and compliance frameworks aligned with SOC 2, ISO 27001, PCI DSS, GDPR, and other standards.
• Establish AI governance controls, including model risk assessments and AI usage policies.
• Ensure compliance with AI regulations such as EU AI Act and NIST AI RMF.
• Lead risk assessments for technology systems and AI models.
• Lead VAPT and manage remediation tracking; drive incident response and threat modeling.
• Protect PII, sensitive data, and AI datasets; oversee secure data lifecycle for AI systems.
• Partner with engineering and data science teams to embed secure-by-design and responsible AI principles.
• Assess AI tools/platforms for compliance, privacy, and security risks; detect bias and data leakage.
• Lead responses to RFPs, vendor assessments, and client due-diligence requests in AI contexts.

Skills

SOC 2

ISO 27001

PCI DSS

GDPR

AI governance

VAPT

audit processes

cybersecurity

documentation

communication

Job description

Chennai, Tamil Nadu, India · Posted Dec 18, 2025

Job Title: Security and Compliance Lead
Location: Chennai
Work Mode: Work From Office
Experience: 5+ Years
Employment Type: Full-Time

Job Summary:
Responsible for managing the organization’s security, risk, and compliance programs, ensuring adherence to standards like SOC 2, ISO 27001, PCI DSS, and GDPR.

Security and Compliance Lead

Summary

The Security and Compliance Lead oversees the organization’s security, risk, and compliance programs with a focus on regulatory frameworks, data protection, cybersecurity, and emerging requirements in AI governance. The role ensures ongoing compliance with standards such as SOC 2, ISO 27001, PCI DSS, GDPR, privacy regulations, and supports secure AI adoption and responsible use across the organization.

Key Responsibilities

Governance, Risk, Compliance & AI Oversight

• Develop, implement, and maintain security and compliance frameworks aligned with SOC 2, ISO 27001, PCI DSS, GDPR, and other standards.
• Establish AI governance controls, including model risk assessments, AI usage policies, and ethical AI guidelines.
• Ensure compliance with AI-related regulations such as the EU AI Act and NIST AI Risk Management Framework.
• Lead risk assessments for both technology systems and AI models.

Security Operations and Technical Oversight

• Lead Vulnerability Assessment and Penetration Testing (VAPT) and manage remediation tracking.
• Drive cybersecurity initiatives including incident response, threat modeling, and monitoring.
• Ensure proper handling and protection of PII, sensitive data, and AI datasets.
• Oversee secure data lifecycle management for AI systems.

AI and Data Security Enablement

• Partner with engineering and data science teams to embed secure-by-design and responsible-AI principles.
• Assess AI tools/platforms for compliance, privacy, and security risks.
• Implement measures to detect bias, drift, data leakage, and unauthorized model access.

Customer and Business Support

• Lead responses to RFPs, vendor assessments, and client due-diligence requests, including AI-specific requirements.
• Provide guidance to business teams on security and AI regulatory obligations.
• Support product and leadership teams in addressing client expectations.

Training, Awareness & Culture

• Deliver training on cybersecurity, data protection, and safe AI usage.
• Promote a culture of compliance, privacy, and responsible use of AI.

Required Skills and Qualifications

• Strong knowledge of SOC 2, ISO 27001, PCI DSS, GDPR, and data protection principles.
• Understanding of AI governance, AI risks, and regulatory trends.
• Experience with VAPT, audit processes, and cybersecurity operations.
• Ability to collaborate across engineering, data science, and legal teams.
• Strong documentation and communication skills.

Years of Experience - 5 to 8 years

Seniority Senior

Skills

Hiring process

1

AI Video Interview

More from Infiniti Software Solutions Private Limited