Assistant Manager - Security Compliance Monitoring
Job Description
Role purpose
Lead the day-to-day operations of the Pune Security Compliance Monitoring team, which serves as the operational engine for the group ISMS (ISO 27001), AI governance (ISO 42001), and adjacent regulatory programs. Accountable for the quality, timeliness, and continuous improvement of monitoring outputs; first-line people manager for the analysts and senior analyst.
Key responsibilities
- Plan, assign, and quality-assure day-to-day monitoring of security controls across roughly 45–50 group business entities.
- Own offshore delivery of evidence collection, control testing, exception tracking, and remediation follow-up against the ISMS baseline.
- Run the operational rhythm: stand-ups, weekly reviews, workload balancing, and structured escalation into your manager.
- Manage, coach, and develop the team; set objectives, run 1:1s, conduct performance reviews, and build career paths.
- Continuously improve workflows; identify automation candidates with the Control Automation team; maintain SOPs and runbooks.
- Track team KPIs (cycle time, evidence quality, remediation aging, audit findings) and support internal and external audits.
Qualifications
Must-have qualifications
- Minimum Graduation required
- 6+ years in information security, GRC, or IT audit, with at least 2 years in a people-management or formal team-lead role.
- Strong working knowledge of ISO/IEC 27001 (Annex A, ISMS lifecycle), control testing, and risk management fundamentals.
- Demonstrable experience leading a compliance or audit team in a global enterprise or shared-services / GCC setup.
- Excellent written and spoken English; able to communicate clearly with senior onshore stakeholders.
- Relevant certification: CISA, CISM, ISO 27001 Lead Implementer / Lead Auditor, or equivalent.
Nice to have
- Exposure to AI governance (ISO/IEC 42001, NIST AI RMF), NIS2, or DORA.
- Experience working with German or European parent organizations.
