Senior Compliance Manager

Straive; Chennai District; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Straive in Chennai seeks a Senior Manager to own enterprise certifications (ISO, PCI-DSS, SOC, CMMI) and client audits. You will lead certification lifecycles, drive framework gaps, and serve as the chief liaison for audits, RFPs, and security questionnaires, coordinating with IT and legal teams.

You will guide cross-functional responses, manage remediation for non-conformances, and collaborate with senior leadership on risk postures and audit readiness.

Qualifications

• Bachelor’s degree in a relevant field; MBA preferred for leadership and strategy roles.
• 8–10 years in IT governance, risk, compliance or information security with 4–5 years in leadership.
• Deep knowledge of ISO/IEC ISMS, ISO 9001 QMS, ISO/IEC AIMS, PCI-DSS v4.0, SOC 1/2 Type II, and CMMI.

Responsibilities

• Direct the lifecycle of corporate certifications (ISO, PCI-DSS, SOC, CMMI) and gaps.
• Act as main point-of-contact for client-driven audits, RFPs, and security questionnaires.
• Coordinate on-site and remote registrar audits and remediation of non-conformances.
• Represent Corporate Quality within DMERT and coordinate with ITSCM during events.

Skills

Leadership

IT governance

Risk & compliance

Information security

Audits

Client audits

Education

Bachelor's degree in Computer Science / IT / Cybersecurity / MIS / Corporate Quality Management

MBA or advanced degree in technical information security / corporate governance

Job description

Senior Manager –Enterprise Certifications and Client Audits

Location : Chennai

Position Overview

This critical leadership role directs, maintains, and scales the organization’s certification requirements and framework. This role owns the end-to-end lifecycle of enterprise certifications (including ISO, PCI-DSS, SOC, and CMMI), champions client audits, and participates in or manages the third-party risk assessment program.

Reporting Structure & Group Dynamics

Vertical Reporting Line: Directly Reports To Vice President (VP) for Corporate Quality

Inter-Departmental Alignment (Horizontal & Vertical Coordination)

Vertical Coordination: Collaborates directly with the Leadership (IT Infrastructure, Chief Information Security Officer, HR, FMG, Legal and Compliance, Finance, Technology, etc. ) to communicate compliance postures, severe risk escalations, and audit vulnerabilities.

Horizontal Coordination: IT & Infosec, Legal & Compliance and Corporate Governance, Procurement, Business and Support teams.

Roles & Responsibilities

Direct the continuous lifecycle of all corporate certifications, including but not limited to ISO 9001, ISO **, ISO **-1, ISO **, ISO ** (AIMS), PCI-DSS, SOC 1/SOC 2 Type II, and CMMI (Dev/Services). Dynamically evaluate framework gap analyses as systems shift or scale, recommending corrective action structures directly to the VP for Corporate Quality. Act as the authoritative point-of-contact and master orchestrator for all incoming client-driven audits, requests for proposals (RFPs), security questionnaires, and statutory independent check inspections. Coordinate on-site and remote independent registrar audits (Stage 1 & Stage 2 examinations), managing remediation lifecycles for any non-conformances discovered. Represent Corporate Quality within the broader Disaster Management Emergency Response Team (DMERT) and coordinate with IT Service and Change Management (ITSCM) during operational events.

Standard Qualifications & Requirements

Educational Attainment Minimum Required: Bachelor’s degree from an accredited institution in Computer Science, Information Technology, Cybersecurity, Management Information Systems (MIS), Corporate Quality Management, or a related field. Preferred: Master’s degree in Business Administration (MBA) or an advanced degree in Technical Information Security/Corporate Governance. Years of Experience Minimum of 8–10 years of progressive operational experience within IT Governance, Risk, Compliance, or Information Security fields. At least 4–5 years spent in a dedicated leadership or managerial capacity, directing multi-layered compliance teams inside global, multi-site operating structures.

Required Technical Knowledge

Deep blueprint knowledge of standard management frameworks: ISO/IEC ** (ISMS), ISO 9001 (QMS), and the emerging ISO/IEC ** (AIMS). Thorough operating comprehension of the payment card industry security standard (PCI-DSS v4.0), AICPA Trust Services Criteria (SOC 1/SOC 2 Type II), and Capability Maturity Model Integration (CMMI) structures.

Professional Certifications

Completed (Minimum of two preferred) ISO ** / ISO 9001 / ISO ** Lead Auditor certifications Project Management Professional (PMP) or CMMI Associate qualifications (highly advantageous)