The role is ideal for professionals with strong experience in Governance, Risk & Compliance (GRC), audit management, data privacy, data classification, and compliance project management.

Key Responsibilities:

- Lead end-to-end compliance projects, including planning, execution, and stakeholder management.

- Manage internal and external audits (ISO 27001, SOC 2, regulatory and statutory audits).

- Drive data privacy initiatives, including GDPR, DPDP Act, CCPA, DPIAs, consent management, and data subject requests.

- Develop and implement data classification and data governance frameworks.

- Build and maintain GRC frameworks, including risk registers, policy management, and compliance reporting.

- Coordinate with legal, information security, auditors, and regulators.

- Monitor regulatory changes and ensure timely compliance.

- Conduct compliance awareness and training programs.

Required Experience:

- 5+ years in Compliance, Risk Management, GRC, or Audit, with at least 2 years in project management.

- Experience managing internal/external audits end-to-end.

- Hands-on experience with data privacy, GRC frameworks, and data governance.

- Knowledge of GDPR, DPDP Act, ISO 27001, SOC 2, RBI/SEBI guidelines, or similar standards.

- Exposure to GRC platforms such as ServiceNow GRC, Archer, MetricStream, or OneTrust is an advantage.