Compliance Specialist

Job Title: Compliance Specialist

Experience: 5–8 years

Role Overview

The Compliance Specialist is responsible for supporting and
managing the organization’s information security, privacy, and regulatory
compliance activities. The role focuses on maintaining management system
documentation, coordinating audits and assessments, tracking corrective
actions, and helping ensure alignment with applicable standards and regulatory
requirements.

Key Responsibilities

ISMS & Governance

• Maintain
  and continually improve the Information Security Management System (ISMS),
  including policies, procedures, controls, and records
  
• Coordinate
  risk assessments, risk treatment plans, Statement of Applicability (SoA),
  and management review activities
  
• Maintain
  compliance registers, control matrices, evidence repositories, and
  documented information
  
• Support
  security awareness initiatives and communicate compliance requirements to
  relevant stakeholders
  

Standards & Regulatory Compliance

• Support
  implementation, maintenance, and continual improvement of ISO/IEC
  27001-based ISMS requirements
  
• Demonstrate
  working knowledge of ISO/IEC 42001 requirements for an Artificial
  Intelligence Management System (AIMS), including AI governance and risk
  management
  
• Coordinate
  compliance activities for PCI DSS and SOC 2, including control mapping,
  evidence collection, gap assessments, and remediation tracking
  
• Interpret
  applicable contractual, regulatory, and customer security requirements and
  map them to internal controls
  

Audit & Assessment Management

• Coordinate
  internal audits, external certification audits, surveillance audits, and
  customer assessments
  
• Prepare
  audit plans, evidence packs, control narratives, and supporting
  documentation
  
• Track
  nonconformities, observations, risks, and corrective and preventive
  actions through closure
  
• Work
  with control owners to validate evidence, address audit findings, and
  demonstrate control effectiveness
  

Risk Management & Continuous Improvement

• Identify
  compliance gaps and assess risks related to information security, privacy,
  AI governance, and applicable standards
  
• Maintain
  risk registers, corrective action plans, compliance calendars, and
  periodic review records
  
• Monitor
  changes to standards and regulatory requirements and assess their impact
  on organizational controls
  
• Recommend
  practical improvements to strengthen governance, documentation, and
  control maturity
  

Stakeholder & Reporting Management

• Collaborate
  with IT, security, HR, legal, engineering, and business teams to implement
  and evidence controls
  
• Prepare
  compliance status reports, audit updates, risk summaries, and management
  review inputs
  
• Act
  as a coordination point for auditors, customers, and internal stakeholders
  on compliance-related matters
  

Required Skills & Experience

• 5–8
  years of experience in information security compliance, GRC, audit, risk
  management, or a related role
  
• Practical
  experience with ISMS and strong working knowledge of ISO/IEC 27001;
  knowledge or experience with ISO/IEC 42001, PCI DSS, and SOC 2 is required
  
• Experience
  in audit coordination, evidence preparation, gap assessments, control
  mapping, and remediation tracking
  

Preferred Qualifications

• Bachelor’s
  degree in Information Technology, Cybersecurity, Computer Science, or a
  related field
  
• Relevant
  certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor,
  ISO/IEC 42001, CISA, CISM, CRISC, CDPSE or PCI DSS-related qualifications
  
• Experience
  managing security incidents and crisis situations
  
• Strong
  leadership, communication, and decision-making skills