Job Summary

The role involves to support and strengthen our organization’s compliance and risk management framework. Ensuring adherence to regulatory requirements, maintaining compliance documentation, supporting audits, and collaborating across departments to uphold industry standards such as ISO 27001,GDPR, and HIPAA.

Key Responsibilities

1. Drive the implementation, monitoring, and continuous improvement of the organization’s compliance

framework aligned with standards such as ISO 27001, SOC 2, GDPR, and HIPAA.

2. Identify, assess, and mitigate compliance and operational risks through structured risk assessment

methodologies.

3. Develop, review, and maintain policies, procedures, and controls to ensure regulatory and contractual

compliance.

4. Lead and coordinate internal audits, risk assessments, and control testing activities to evaluate the

effectiveness of existing processes.

5. Act as a key point of contact for external audits, including SOC 2 Type II and ISO certification audits,ensuring timely and successful completion.

6. Track audit findings, drive remediation efforts, and report status to senior stakeholders.

7. Establish and monitor key compliance metrics, KPIs, and dashboards for management reporting.

8. Prepare detailed compliance reports, presentations, and updates for leadership and audit committees.

9. Ensure proper documentation and evidence management to support audits and regulatory reviews.

10. Conduct vendor due diligence, risk assessments, and ongoing monitoring of third-party compliance posture.