Role: Security & Compliance Manager

About the Role

We are looking for an experienced Security & Compliance Manager to lead and strengthen our information security, risk management, and regulatory compliance practices.

This role is responsible for ensuring that the organization’s IT systems, processes, and policies meet internal security standards and external regulatory requirements. You will partner closely with business, technology, and audit teams to drive risk mitigation strategies and build a strong governance framework.

Key Responsibilities

• Lead and manage information security, risk, and compliance initiatives across the organization
• Ensure adherence to regulatory and industry standards (e.g., ISO 27001, NIST, GDPR, SOC frameworks)
• Conduct IT risk assessments, security audits, and control testing to identify vulnerabilities
• Develop, implement, and enhance security policies, procedures, and governance frameworks
• Oversee cybersecurity risk mitigation strategies, including vulnerability management and incident response preparedness
• Collaborate with internal and external stakeholders (including leadership teams) to drive compliance programs
• Manage third-party/vendor risk assessments and ensure contractual security compliance
• Monitor evolving regulatory requirements and ensure organizational readiness
• Support business continuity and disaster recovery planning and testing
• Drive awareness and training initiatives to strengthen security culture across teams

Experience, Skills & Education Qualification

Experience

• 10+ years of experience in IT security, risk management, compliance, or IT audit
• Proven experience in handling cybersecurity audits, governance, and regulatory compliance
• Experience working in consulting firms, large enterprises, or technology-driven environments preferred

Skills

• Strong knowledge of frameworks such as ISO 27001, NIST, COBIT, SOC1/SOC2
• Expertise in IT risk assessment, audit processes, and control frameworks
• Understanding of cloud security (AWS, Azure, GCP) and modern security architectures
• Familiarity with tools such as vulnerability scanners, GRC platforms, and audit tools
• Strong analytical, stakeholder management, and communication skills

Education & Certifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field
• ISO 27001 Certification- Mandatory
• Certifications such as CISA, CISSP preferred