Role : Cybersecurity Compliance Expert

Location : Hyderabad

Our Team:

Our Governance, Risk & Compliance team, reporting directly to the CISO alongside the Security Architecture and Security Operations & SOC teams, plays a pivotal role in safeguarding the organization's assets and ensuring regulatory compliance. Under the leadership of the Governance, Risk & Compliance Lead, this team ensures our organization's technological infrastructure is secure, compliant, and resilient against evolving cyber threats.

Main responsibilities:

The Compliance FTE, reporting to the GRC Lead, will play a pivotal role in ensuring regulatory adherence and operational integrity within the Governance, Risk & Compliance team. This role focuses on maintaining compliance with industry standards, policies, and regulatory requirements to mitigate legal and operational risks effectively. Key responsibilities include:

• Strategy & Roadmap (incl. budget)
  • Refresh cyber strategy at least every 18 months and ensure it supports the broader organisation strategy.
  • Deliver cybersecurity strategy in line with defined roadmap, timelines and milestones.
  • Communicate a prioritised, approved and funded cybersecurity roadmap to the broader organisation.
  • Manage cybersecurity spend optimisation and benchmark regularly (i.e. every 24 months)
• Performance management & consistency
  • Compile data from defined cybersecurity KPIs every month for analysis to drive improvement actions.
  • Review outputs of KPIs (real time or periodically depending on metrics) and identify trends/issues with performance, facilitate remediation of issues and refresh KPIs where necessary.
• Stakeholder management
  • Prepare and provide Board/ELT with monthly/quarterly updates.
  • Define, review, test and update decision rights for the cybersecurity team in the key digital and wider organisation governance forums to ensure effective and appropriate decision making related to cybersecurity.
• Capability building
  • Design, implement and maintain training/awareness programs for the wider org.
  • Ensure cybersecurity team has the right capabilities through training and evaluation.
• Manage activities with cross-team dependencies
  • Provide guidance for key digital & cloud initiatives from a cybersecurity standpoint.
  • Manage insurance coverage aligned with board and leaders across wider organisation.

• Experience:
  • 5-10 years of professional experience (equivalent combination of experience and education accepted)
  • Previous work in an international environment.
  • Demonstrated experience in cybersecurity compliance roles, focusing on strategic planning and execution.
  • Proven track record of contributing to the development and implementation of cybersecurity strategies aligned with compliance standards and organizational goals.
  • Experience in developing and implementing cybersecurity strategies that align with compliance standards and organizational objectives.
  • Experience in managing cybersecurity performance metrics and KPIs to ensure continuous compliance and improvement.
  • Experience collaborating with Security Architect and Operations teams in a feedback loop.
  • Ability to develop and communicate policies based on feedback from the Security Architect team.
• Soft skills:
  • Broad experience in working in large digital teams, with an understanding of how digital and business processes are linked.
  • Expertise in stakeholder engagement and communication related to cybersecurity compliance, particularly with senior leadership and external auditors.
  • Ability to design and execute training programs to enhance compliance awareness and build cybersecurity capabilities across the organization.
  • Skilled problem solver and self-starter.
  • A hands-on pragmatic attitude to driving change.
  • Positive, "can-do" attitude.
• Technical skills:
  • Experience with AGILE or similar project management frameworks.
  • Working knowledge of common information security management frameworks (ISO/IEC 27001, ITIL, NIST, NISD, CISSP/CCSP, QxP, CIS20).
  • Understanding of cybersecurity compliance frameworks and regulations (e.g., GDPR, CCPA, HIPAA, SOX) relevant to digital domains (network, cloud, endpoint, applications, data).
  • Strong knowledge of cybersecurity risk management principles and practices, including risk assessment and mitigation strategies.
• Education:
  • Bachelor's and master's degree (preferred) in any of the following fields of study: Information Technology, Computer Science, Cybersecurity or Information Security
• Languages:
  • English