Information Security Compliance Officer

About the role

The Information Security Compliance Officer will lead the organization’s effort to maintain and improve information security compliance across all global operations. You will work closely with cross‑functional teams to embed security best practices, conduct audits, and ensure adherence to key frameworks such as ISO 27001, PCI‑DSS, and GDPR.

Key responsibilities

• Conduct regular security audits, risk assessments, and reviews of IT infrastructure and operations.
• Maintain compliance with technical certifications including ISO 27001, PCI‑DSS, GDPR, and related standards.
• Collect evidence and artifacts required for compliance documentation and audit readiness.
• Prepare for and manage internal and external audits, ensuring all necessary documentation is available.
• Monitor security incidents, manage security tickets, and perform incident analysis.
• Investigate security incidents across endpoints, servers, and networks in collaboration with IT and business teams.

Required profile

• Bachelor’s degree in IT, Computer Science, or a related field.
• 4–5 years of experience in security and compliance, information security management, or a related cybersecurity role.
• Strong working knowledge of ISO 27001 (mandatory).
• Professional certifications such as CISM or CompTIA Security+ are a plus.
• Familiarity with Microsoft Azure environments, Azure Entra, and Intune policies is advantageous.
• Excellent communication, organization, and teamwork skills.

Required skills

• ISO 27001
• PCI‑DSS
• GDPR
• CISM (or similar security certification)
• CompTIA Security+
• NIST framework
• Microsoft Azure
• Azure Entra
• Intune policies