Senior Compliance Officer

Multiplier Technologies Private Limited; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Multiplier Technologies Private Limited is seeking a proactive Compliance Officer to join our Infrastructure team in Bengaluru. You will drive governance, risk, and compliance programs across ISO 27001, SOC 2, GDPR, HIPAA, and DPDP, while shaping policies and risk mitigations to safeguard data.

You will lead VRM, privacy assessments, and data protection initiatives, collaborating with cloud and security teams to align with business needs and AI governance challenges in a fast‑growing SaaS

Qualifications

• 5+ years of progressive experience in compliance, GRC, data security, or a related field.
• Strong understanding of ISO 27001, SOC 2, GDPR, HIPAA, and PCI-DSS.
• Experience developing and managing risk registers and mitigation plans.
• Ability to develop internal policies and controls.
• Experience with Vendor Risk Management (VRM).
• Familiarity with data classification, retention, and encryption best practices.
• Excellent documentation, communication, and training skills for cross-functional enablement.
• Strong problem-solving and troubleshooting mindset, with an eye for process improvement.

Responsibilities

• Governance, Risk, & Compliance (GRC) responsibilities across the organization.
• Develop and maintain a risk register with mitigation tracking.
• Lead internal policy development and a controls library for regulatory adherence.
• Conduct VRM activities, including vendor risk tiers and contract reviews.
• Perform Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIA).
• Collaborate on BC/DR planning with Cloud Infrastructure teams.
• Define data classification, retention, and encryption policies.
• Oversee encryption protocols and Data Loss Prevention (DLP) programs.

Skills

GRC

Data security

Compliance frameworks

VRM

Privacy concepts

Policy development

Documentation

Cross-functional

Job description

About us :

The global hiring revolution is shaping a future where talent can thrive everywhere, driving innovation and progress on a global scale.

Multiplier is at the forefront of this change. By removing barriers and simplifying global hiring, we’re creating a level playing field where businesses and individuals – (like you) – can compete, grow, and succeed, regardless of geography.

Multiplier empowers companies to hire, onboard, manage, and pay talent in 150+ countries, quickly and compliantly. Our mission is to build a world without limits, where ambitious businesses can look beyond borders to build their global dream teams. Our unified employment platform, complete with world-class EOR, AOR and Global Payroll products, means it has never been easier to seize the global hiring opportunity.

We’re backed by some of the best in the business, (Sequoia, DST, and Tiger Global), are led by industry-leading experts, scaling fast, and seeking brilliant like-minded enthusiasts to join our team. The future is borderless. Let’s build it together.

What’s the opportunity?

Multiplier is seeking a proactive and detail-oriented Compliance Officer to join our growing Infrastructure team. This role is crucial for ensuring Multiplier’s adherence to global regulatory requirements and industry best practices in the areas of governance, risk, compliance, and data security. You will play a key role in developing, implementing, and maintaining our compliance frameworks and policies, safeguarding our data, and mitigating risks.

What you’ll do:

• Responsible for the Governance, Risk, & Compliance (GRC)

• Add, evaluate, manage, and maintain compliance with various laws and frameworks such as ISO 27001, SOC 2, GDPR, HIPAA, and DPDP.

• Develop and maintain a comprehensive risk register and track mitigation efforts.

• Lead the development of internal policies and a controls library to ensure regulatory adherence.

• Manage Vendor Risk Management (VRM) activities, including defining risk tiers, evaluating SIG questionnaires, and reviewing relevant contract clauses.

• Conduct Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIAs).

• Collaborate with the Cloud Infrastructure team on Business Continuity (BC) and Disaster Recovery (DR) planning and drills.

• Develop and implement data classification policies (public/internal/confidential).

• Define and enforce data retention and deletion policies.

• Oversee the implementation and management of encryption protocols (at rest & in transit).

• Implement and manage Data Loss Prevention (DLP) programs.

• Develop and maintain processes for consent tracking and privacy enforcement (e.g., GDPR/CCPA).

• Identify and assess new threats and risks related to data governance and exposure due to increasing AI adoption.

• Develop and implement security and governance measures specific to AI systems and data usage.

What are we looking for?

• 5+ years of progressive experience in compliance, GRC, data security, or a related field.

• Strong understanding and practical experience with compliance frameworks such as ISO 27001, SOC 2, GDPR, HIPAA, and PCI-DSS.

• Proven experience in developing and managing risk registers and mitigation plans.

• Demonstrated ability to develop and implement internal policies and controls.

• Experience with Vendor Risk Management (VRM) processes.

• Familiarity with data classification, retention, and encryption best practices.

• Excellent documentation, communication, and training skills for cross-functional enablement.

• Strong problem-solving and troubleshooting mindset, with an eye for process improvement.

Preferred Qualifications

• Experience conducting Privacy Impact Assessments (PIA) and Data Protection Impact Assessments (DPIAs).

• Knowledge of Business Continuity (BC) and Disaster Recovery (DR) planning.

• Familiarity with Data Loss Prevention (DLP) programs.

• Understanding of consent tracking and privacy enforcement mechanisms (e.g., GDPR/CCPA).

• Prior experience in a fast-growing tech or SaaS environment.

• Certifications in compliance, data privacy (e.g., CIPP/E, CIPT), or security (e.g., CISSP).

• Exposure to AI security and governance challenges.

Equal Employment Opportunity:

Multiplier is an equal opportunity employer: we value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.