Audit Compliance Manager

• Manager / Sr. Manager – Audit & Compliance (InfoSec & Regulatory)
• Industry: BPO / BPM / ITES
• Location: India
• Reporting to: Head – Audit & Compliance
• Role Purpose

The Manager / Sr. Manager – Audit & Compliance is responsible for leading the organizations Information Security, statutory compliance, and contractual audit readiness across client programs and operational sites. The role ensures compliance with international information security frameworks, client contractual controls, and regulatory standards, while driving risk mitigation and continuous governance improvements.

Audit management functions include planning audits, evaluating controls, and advising leadership on risk and governance effectiveness.

Key Responsibilities

1. Information Security & Compliance Governance

In close partnership with IT-Infosec Officer, Lead enterprise compliance programs aligned with platforms like ISO 27001 ISMS, SOC 2, PCI DSS, GDPR / Data Privacy frameworks. Maintain compliance readiness for internal and external audits. Implement policies and controls aligned with security standards.

2. Audit Program Management

Design and execute annual internal audit plans, directly lead Internal compliance audits, Client audits, Certification audits (ISO, SOC), Perform control effectiveness testing, Prepare audit reports and risk findings for senior management. Typical audit scope include Information security controls, Operational processes, Data protection compliance and Client contractual obligations

3. Regulatory & Contractual Compliance

Ensure compliance with Client security requirements, IT Act & data protection regulations, RBI / financial client guidelines (if BFSI clients), HIPAA (for healthcare processes), PCI DSS (for payment processes)

• 4. Risk Management & Control Framework
• Conduct enterprise risk assessments, Identify operational and information security risks, Implement mitigation strategies, Track corrective action plans (CAPA)
• 5. Client & Certification Audit Management

Manage audits conducted by Clients, External auditors, Certification bodies. Key deliverables being Evidence documentation, Compliance dashboards, Audit closure reports etc.

• 6. Policy & Governance Framework
• Develop and maintain Information security policies (With IT Infosec officer) Data protection policies (With IT Infosec officer), Compliance SOPs and
• Risk registers
• 7. Training & Awareness
• Drive enterprise programs for, Information security awareness, Compliance training, Data privacy training
• 8. Stakeholder & Leadership Engagement

Collaborate with Delivery leaders, IT security teams, Legal and risk functions and Client compliance teams. Provide leadership reporting on Compliance scorecards, Risk heatmaps, Audit outcomes etc.

Required Experience

• Requirement Expectation
• Experience 6–12 years total
• Relevant experience 3–5 years in audit/compliance
• Industry BPO / ITES / IT Services
• Team leadership 3+ years

Required Certifications

• Mandatory (at least 1–2): CISA, ISO 27001 Lead Auditor, COPC
• Highly preferred CISM, CRISC
• Good to have Lean Six Sigma Green Belt / Black Belt

Required Technical Expertise:

Compliance Frameworks, ISO 27001 ISMS, SOC 2, PCI DSS, GDPR / Data Privacy, Audit Tools, GRC platforms, Risk management tools, Compliance dashboards,

Process Knowledge, Internal audit lifecycle, Risk assessment frameworks, Control testing methodologies

Key Competencies:

Leadership, Audit program leadership, Cross-functional collaboration, Stakeholder management, Analytical, Risk identification, Control testing, Compliance gap analysis.

Strategic:

Compliance governance, Risk mitigation strategy, Regulatory monitoring,

Key Performance Indicators (KPIs)

Typical KPIs used in BPOs: % audit compliance closure, ISO / SOC certification success rate, Number of security incidents, Client audit scores, Regulatory compliance adherence, Risk mitigation effectiveness

Contact: If you meet the above criteria, please mail your resume to [HIDDEN TEXT]