Manager – Governance and Compliance

This is a fully remote position, open to applicants in India.

📋 Description

• Lead the organization's comprehensive, long-term strategy for Security, Risk & Compliance, and AI Governance.

• Oversee and implement security programs, AI governance frameworks, and compliance obligations.

• Create and sustain policies, standards, processes, and tools for cybersecurity readiness, regulatory compliance, AI governance, and operational excellence.

• Set and uphold acceptable-use policies and security protocols for Generative AI and Machine Learning tools.

• Define standards for AI governance and security architecture in client-facing projects and deliverables.

• Conduct AI risk assessments and audits, focusing on prompt injection, training data provenance, bias mitigation, and third-party SaaS/vendor AI features.

• Provide compliance consulting and advisory services to clients.

• Design and integrate compliance processes into assessments.

• Ensure adherence to global and regional privacy laws and manage cross-border data transfer regulations.

• Supervise IT infrastructure security, monitoring, and upkeep.

• Enhance the security program through penetration testing, disaster recovery simulations, and CSPM.

• Incorporate DevSecOps and Secure SDLC methodologies into build pipelines.

• Manage software supply chain security, dependency scanning, and SBOMs.

• Implement Zero Trust architecture, least privilege, and RBAC principles.

• Lead incident response efforts, including severity assessment, resource allocation, and threat management.

• Manage SIEM, Microsoft Defender, secret scanning, endpoint management, and vulnerability scanning tools.

• Promote a security culture through phishing simulations, employee awareness initiatives, and AI/social-engineering risk training.

• Direct compliance programs and audits while coordinating with auditors and vCISO providers.

• Evaluate emerging technologies and spearhead strategic digital initiatives.

• Oversee vendor and technology partner relationships, including contracts, third-party risk assessments, vendor AI evaluations, and service level agreements.

• Perform additional duties of a similar nature and responsibility as required.

⛳️ Requirements

• Over 8 years of experience in a Senior IT, Security, or Compliance role.

• A minimum of 2 years in a leadership role managing a technical team.

• Knowledge and experience in Cloud Technologies.

• General familiarity with GCP, AWS, and Azure platforms.

• Proven experience leading and successfully passing audits for SOC 2, ISO 27001, and ISO 42001.

• Strong grasp of AI governance frameworks, AI safety, data privacy in AI pipelines, and LLM threat modeling, including OWASP Top 10 for LLMs.

• Practical knowledge of MITRE ATT&CK, CIS, NIST, ISO, and related frameworks.

• Familiarity with the India DPDP Act, GDPR, CCPA, PDPA, and governance of cross-border data transfers.

• Understanding of networking, identity access policies, and best practices in cloud security.

• Excellent verbal and written communication skills.

• Strong analytical and problem-solving capabilities.

• Effective time management skills for complex, cross-functional technology projects.

• Proactive in identifying issues and opportunities for improvement.

• Ability to work collaboratively with sales, marketing, customer support, and product development teams.

• Adaptability to changing business needs and unforeseen security challenges.

• Experience in developing and managing departmental budgets and negotiating with vendors.

• Industry certifications in Information Security, such as CCSP, CISSP, or CISM, or Risk Management, such as CRISC.

• Bachelor's degree in Computer Science, Information Technology, Information Systems, or IT Management.

🏝️ Benefits

• Remote work from anywhere in India.

• Flexible working hours to accommodate global collaboration and business requirements.

• Commitment to diversity, inclusion, and equity.

• Employee awareness and sensitization programs.

• A safe and supportive work environment.