IT Cyber Security & Compliance Executive

Job Title: IT Cyber Security & Compliance Executive

Department: Information Technology (IT)

Location: Bangalore

Reporting To: Head IT / IT Manager

Job Summary

The IT Cyber Security & Compliance Executive will be responsible for maintaining the organization's information security posture by implementing cybersecurity best practices, ensuring compliance with internal and regulatory requirements, developing and maintaining IT Standard Operating Procedures (SOPs), and coordinating internal and external audits. The role requires close collaboration with cross-functional teams to ensure the confidentiality, integrity, and availability of organizational data and systems.

Key Responsibilities

Cyber Security

• • Monitor and maintain the organization's cybersecurity controls and security posture.
  • Implement security policies, standards, and best practices across the organization.
  • Perform periodic vulnerability assessments and coordinate remediation activities.
  • Monitor antivirus, firewall, endpoint security, email security, and other security solutions.
  • Investigate security incidents and support incident response activities.
  • Conduct periodic user access reviews and privilege management.
  • Promote cybersecurity awareness and conduct employee security training sessions.

Compliance

• • Ensure compliance with applicable information security standards, regulatory requirements, and company policies.
  • Maintain compliance documentation and evidence for audits.
  • Track compliance gaps and coordinate corrective and preventive actions.
  • Work closely with internal stakeholders to implement compliance requirements.
  • Support risk assessments and maintain the IT risk register.

SOP & Documentation

• • Develop, review, update, and maintain IT Standard Operating Procedures (SOPs), policies, and process documentation.
  • Ensure all IT documentation is version-controlled and periodically reviewed.
  • Create documentation for IT processes, disaster recovery, backup procedures, user management, and asset management.
  • Maintain documentation related to software licenses, IT assets, and security controls.

Audit Management

• • Coordinate internal, customer, and external IT audits.
  • Prepare audit documentation and provide evidence during audits.
  • Track audit observations and ensure timely closure of corrective actions.
  • Conduct periodic internal compliance reviews and readiness assessments.
  • Maintain audit records and compliance reports.

IT Governance

• • Support implementation of IT governance and security frameworks.
  • Monitor compliance with IT policies across departments.
  • Assist in business continuity and disaster recovery planning.
  • Recommend improvements to strengthen IT security and compliance.

Required Qualifications

• • Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
  • Certifications such as CEH, ISO 27001 Lead Implementer/Internal Auditor, CompTIA Security+, CISA, or CISSP are preferred.

Experience

• • 2-5 years of experience in Cyber Security, Information Security, IT Compliance, or IT Governance.
  • Experience handling IT audits and compliance activities.
  • Experience preparing and maintaining SOPs, policies, and process documentation.
  • Familiarity with cybersecurity tools and security monitoring.

Required Skills

• • Strong understanding of cybersecurity principles and best practices.
  • Knowledge of IT compliance frameworks and information security standards.
  • Experience with audit documentation and compliance reporting.
  • Excellent documentation and SOP writing skills.
  • Strong analytical and problem-solving abilities.
  • Good communication and stakeholder management skills.
  • Ability to manage multiple priorities and meet deadlines.

Preferred Knowledge

• • ISO 27001
  • GDPR (preferred)
  • Information Security Management Systems (ISMS)
  • Risk Assessment & Risk Management
  • Vulnerability Management
  • Incident Response
  • Business Continuity & Disaster Recovery
  • IT Asset Management
  • Access Control & Identity Management
  • Data Protection and Privacy