Senior Compliance Manager

Straive; Hyderabad, Chennai, Bengaluru; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

Straive in India seeks a senior leader to own and scale enterprise certifications including ISO, PCI-DSS, SOC, and CMMI. The role directs end-to-end lifecycle, champions audits, and guides third-party risk programs from Hyderabad and other locations.

You will coordinate internal and external audits, drive remediation for non-conformities, and lead cross-functional teams across IT governance, risk, and compliance to protect client data and business operations.

Qualifications

• Minimum 8–10 years in IT Governance, Risk, Compliance, or Information Security
• At least 4–5 years in leadership or managerial capacity directing compliance teams
• Experience with multiple certifications and audits across global structures

Responsibilities

• Direct the lifecycle of corporate certifications (ISO, PCI-DSS, SOC, CMMI) across the enterprise
• Coordinate client audits, RFPs, security questionnaires, and third‑party reviews
• Lead remediation lifecycles for non-conformities discovered during audits
• Manage on-site and remote registrar audits and Stage 1 & 2 examinations
• Collaborate with Disaster Management and IT Service teams during operational events

Skills

Leadership

IT Governance

Compliance Management

Auditing

Certifications

Risk Assessment

Vendor Coordination

Education

Bachelor's in CS/IT/Cybersecurity/MIS

MBA or advanced tech security governance

Tools

ISO/IEC 27001

PCI-DSS

SOC 1/2

CMMI

Job description

Only immediate joiners preferred.

Job Location : Chennai/Bangalore/ Hyderabad/Kolkata/Gurgaon/ /Noida/ Mumbai/ Pune

Position Overview:

This critical leadership role directs, maintains, and scales the organizations certification requirements and framework. This role owns the end-to-end lifecycle of enterprise certifications (including ISO, PCI-DSS, SOC, and CMMI), champions client audits, and participates in or manages the third-party risk assessment program.

Roles & Responsibilities

• Direct the continuous lifecycle of all corporate certifications, including but not limited to ISO 9001, ISO 14001, ISO 14064-1, ISO 27001, ISO 42001 (AIMS), PCI-DSS, SOC 1/SOC 2 Type II, and CMMI (Dev/Services).
• Dynamically evaluate framework gap analyses as systems shift or scale, recommending corrective action structures directly to the VP for Corporate Quality.
• Act as the authoritative point-of-contact and master orchestrator for all incoming client-driven audits, requests for proposals (RFPs), security questionnaires, and statutory independent check inspections.
• Coordinate on-site and remote independent registrar audits (Stage 1 & Stage 2 examinations), managing remediation lifecycles for any non-conformances discovered.
• Represent Corporate Quality within the broader Disaster Management Emergency Response Team (DMERT) and coordinate with IT Service and Change Management (ITSCM) during operational events.

Standard Qualifications & Requirements

- Educational Attainment

• Minimum Required: Bachelors degree from an accredited institution in Computer Science, Information Technology, Cybersecurity, Management Information Systems (MIS), Corporate Quality Management, or a related field.
• Preferred: Masters degree in Business Administration (MBA) or an advanced degree in Technical Information Security/Corporate Governance.

-Years of Experience

• Minimum of 8-10 years of progressive operational experience within IT Governance, Risk, Compliance, or Information Security fields.
• At least 4-5 years spent in a dedicated leadership or managerial capacity, directing multi-layered compliance teams inside global, multi-site operating structures.

-Required Technical Knowledge

• Deep blueprint knowledge of standard management frameworks: ISO/IEC 27001 (ISMS), ISO 9001 (QMS), and the emerging ISO/IEC 42001 (AIMS).
• Thorough operating comprehension of the payment card industry security standard (PCI-DSS v4.0), AICPA Trust Services Criteria (SOC 1/SOC 2 Type II), and Capability Maturity Model Integration (CMMI) structures.

- Professional Certifications Completed (Minimum of two preferred)

• ISO 27001 / ISO 9001 / ISO 42001 Lead Auditor certifications
• Project Management Professional (PMP) or CMMI Associate qualifications (highly advantageous)