Security, Audit & Compliance Specialist – Mumbai

About the role

We are looking for a Security, Audit & Compliance specialist to join our Mumbai team. The role focuses on implementing and maintaining information security controls, supporting audit activities and ensuring regulatory compliance across the organisation.

Key responsibilities

• Assist in the design, implementation and monitoring of the ISMS in line with ISO 27001.
• Conduct IT General Controls (ITGC) evaluations and support internal and external audit engagements.
• Maintain and update security policies, processes and standards to meet regulatory requirements such as the DPDP Act and the IT Act.
• Perform gap analyses against frameworks including PCI DSS, COBIT and NIST and recommend remediation actions.
• Collaborate with cloud teams to ensure security best‑practice implementation on Google Cloud and Microsoft Azure platforms.

Required profile

• 2‑4 years of professional experience in information security, audit or compliance.
• Strong understanding of ISO 27001 controls, ISMS lifecycle and ITGC.
• Familiarity with industry frameworks such as PCI DSS, COBIT, NIST and Indian data protection regulations.
• Experience working with public cloud environments (Google Cloud, Microsoft Azure).

Required skills

• ISO 27001
• ISMS lifecycle management
• ITGC evaluation
• PCI DSS
• COBIT
• NIST
• DPDP Act compliance
• IT Act compliance
• Google Cloud Platform
• Microsoft Azure