IT and Security Compliance Specialist/Manager

Job Overview:

This position is for 7-12 years' experience IT and Security Compliance Specialist ensures that the organization’s IT systems and processes adhere to regulatory, security, and compliance standards. This role involves conducting audits, risk assessment, managing security policies, ensuring adherence to industry regulations (e.g., ISO (at least 3 Information Security related), SOC2, GDPR, HIPAA, PCI-DSS), and working with various departments to maintain a secure and compliant IT environment.

• Education:

o Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.

o Having anyone of certifications is preferred (e.g., CISSP, CISA, CISM, CRISC).

• Experience:

o Minimum of 7 years of experience in IT security & compliance, or a related field.

o Working knowledge of GRC tools and compliance automation tools like Drata, Sprinto, Vanta is added advantage.

o Strong knowledge of compliance frameworks (e.g., SOC2, GDPR, HIPAA, ISO 27001, PCI-DSS).

• Technical Skills:

o Knowledge of security technologies, risk management, and vulnerability assessment tools.

o Familiarity with cloud security and third-party risk management.

o Experience with security audits and compliance assessments.

• Soft Skills:

o Strong analytical and problem-solving skills.

o Excellent communication and interpersonal skills.

o Ability to work independently and collaboratively in a team environment.

o Strong attention to detail and ability to handle sensitive information with discretion.