Information Security Compliance Officer

About the role

As an Information Security Compliance Officer, you will be responsible for managing and ensuring the organization’s information security compliance across all our global operations. Your role will involve collaborating across teams to integrate security practices, conducting regular audits and risk assessments, liaising with external auditors and ensuring compliance to different security frameworks such as ISO 27001, PCI‑DSS, GDPR etc.

Key responsibilities

• Conduct regular security audits, risk assessments, and reviews focused on IT infrastructure and operations.
• Maintain compliance with technical certifications such as ISO 27001, PCI‑DSS, GDPR etc.
• Collect evidence and artifacts to meet compliance requirements.
• Prepare for and manage internal and external audits and ensure all necessary documentation for audit‑readiness.
• Monitor security, manage security cases & tickets, perform security incident analysis and vulnerability analysis.
• Handle and investigate security incidents across endpoints, servers, and networks by liaising with IT and business teams.

Required profile

• Bachelor’s degree in IT, Computer Science, or a related field.
• 5‑7 years of experience in security & compliance, information security management, or a related cybersecurity field.
• Strong working knowledge of ISO 27001 (mandatory).
• Security certifications such as CISM, CompTIA Security+ and/or experience with PCI‑DSS / NIST are advantageous.
• Familiarity with Microsoft environments such as Azure Entra and Intune policies is advantageous.
• Ability to work well in a team and collaborate effectively with colleagues at all levels.
• Excellent verbal, written, interpersonal communication and presentation skills.
• Highly organized, detail‑oriented and professional.

Required skills

• ISO 27001
• CISM
• CompTIA Security+
• PCI‑DSS
• NIST
• Microsoft Azure Entra
• Microsoft Intune