Senior Compliance Manager

Straive · India

Senior Manager –Enterprise Certifications and Client Audits

Location : Chennai

Position Overview: This critical leadership role directs, maintains, and scales the organization’s certification requirements and framework. This role owns the end-to-end lifecycle of enterprise certifications (including ISO, PCI-DSS, SOC, and CMMI), champions client audits, and participates in or manages the third-party risk assessment program.

Reporting Structure & Group Dynamics

Vertical Reporting Line: Directly Reports To Vice President (VP) for Corporate Quality

Inter-Departmental Alignment (Horizontal & Vertical Coordination)

• Vertical Coordination: Collaborates directly with the Leadership (IT Infrastructure, Chief Information Security Officer, HR, FMG, Legal and Compliance, Finance, Technology, etc. ) to communicate compliance postures, severe risk escalations, and audit vulnerabilities.
• Horizontal Coordination: IT & Infosec, Legal & Compliance and Corporate Governance, Procurement, Business and Support teams.

Roles & Responsibilities

• Direct the continuous lifecycle of all corporate certifications, including but not limited to ISO 9001, ISO 14001, ISO 14064-1, ISO 27001, ISO 42001 (AIMS), PCI-DSS, SOC 1/SOC 2 Type II, and CMMI (Dev/Services).
• Dynamically evaluate framework gap analyses as systems shift or scale, recommending corrective action structures directly to the VP for Corporate Quality.
• Act as the authoritative point-of-contact and master orchestrator for all incoming client-driven audits, requests for proposals (RFPs), security questionnaires, and statutory independent check inspections.
• Coordinate on-site and remote independent registrar audits (Stage 1 & Stage 2 examinations), managing remediation lifecycles for any non-conformances discovered.
• Represent Corporate Quality within the broader Disaster Management Emergency Response Team (DMERT) and coordinate with IT Service and Change Management (ITSCM) during operational events.

Standard Qualifications & Requirements

Educational Attainment

• Minimum Required: Bachelor’s degree from an accredited institution in Computer Science, Information Technology, Cybersecurity, Management Information Systems (MIS), Corporate Quality Management, or a related field.
• Preferred: Master’s degree in Business Administration (MBA) or an advanced degree in Technical Information Security/Corporate Governance.

Years of Experience

• Minimum of 8–10 years of progressive operational experience within IT Governance, Risk, Compliance, or Information Security fields.
• At least 4–5 years spent in a dedicated leadership or managerial capacity, directing multi-layered compliance teams inside global, multi-site operating structures.

Required Technical Knowledge

• Deep blueprint knowledge of standard management frameworks: ISO/IEC 27001 (ISMS), ISO 9001 (QMS), and the emerging ISO/IEC 42001 (AIMS).
• Thorough operating comprehension of the payment card industry security standard (PCI-DSS v4.0), AICPA Trust Services Criteria (SOC 1/SOC 2 Type II), and Capability Maturity Model Integration (CMMI) structures.

Professional Certifications Completed (Minimum of two preferred)

• ISO 27001 / ISO 9001 / ISO 42001 Lead Auditor certifications
• Project Management Professional (PMP) or CMMI Associate qualifications (highly advantageous)