About This Role
Supporting the global IT Security Governance, Risk, and Compliance function is the core of this role, assisting in the execution of compliance programs, audit activities, and risk management processes. This position is responsible for coordinating evidence collection, supporting regulatory and framework adherence, and driving remediation tracking across key regulatory domains including TISAX, NIS2, ISO/IEC 27001, SOX, GDPR, DPDP Act (India), Privacy, and emerging AI regulations.
Responsibilities
- Assist in the coordination and execution of internal and external audits (TISAX, NIS2, GDPR, ISO), including evidence gathering, validation, and documentation
- Collect, review, and organize audit artifacts to ensure completeness, accuracy, and readiness for auditors
- Support compliance activities aligned with GDPR, Privacy laws, AI regulatory requirements, and NIS2 Directive, ensuring adherence to evolving European regulatory expectations
- Track and coordinate remediation efforts across IT and business teams, ensuring timely resolution of audit findings and risk gaps
- Participate in risk assessments by identifying, documenting, and evaluating control effectiveness and residual risks
- Assist in maintaining and improving TISAX readiness, including control validation and documentation upkeep
- Support development and maintenance of security policies, procedures, and control documentation aligned with global standards
- Work with IT, Legal, Privacy, and business stakeholders to ensure compliance requirements are understood and implemented effectively
- Prepare audit status reports, compliance dashboards, and risk updates for GRC leadership
- Promote a strong culture of security awareness across business and IT stakeholders
Requirements
- Bachelor's degree in Information Security, IT, Risk Management, or related field
- Strong understanding of IT governance, risk management, and compliance principles
- Knowledge of regulatory frameworks including GDPR, NIS2, TISAX, and Privacy requirements
- Familiarity with emerging regulations impacting IT security such as AI governance and regulatory frameworks
- 3–5 years of experience in IT GRC, IT audit, or cybersecurity compliance
- Hands-on experience working in global delivery models or supporting multinational audits (internal/external)
- Exposure to TISAX, NIS2, SOX, GDPR, ISO/IEC 27001, and related frameworks
- Experience with GRC tools, audit management platforms, and evidence tracking systems
- Ability to work with cross-functional teams and present findings clearly
- Strong attention to detail and documentation quality
- Analytical mindset with structured problem-solving skills
