Control Advisor

Basic Function

Support the organization’s information security compliance program by leading audits, regulatory compliance initiatives, control assessments, risk management activities, and evidence collection. Act as a trusted advisor to the business, promoting risk-based decision-making, compliance awareness, control maturity, and process improvement.

Key Responsibilities

Compliance & Audit Management

• Lead and maintain information security compliance programs aligned with corporate policies and regulatory requirements.
• Support and manage audits and compliance frameworks such as ISO 27001, SOC 2, GDPR, DORA, FISMA, and related standards.
• Serve as a subject matter expert on security and compliance matters.
• Plan and execute framework audits, collect and validate evidence, perform control testing, and assess procedural compliance.
• Identify, document, and track audit findings, remediation plans, and control improvements.
• Partner with business and technology teams to ensure successful audit outcomes and ongoing compliance.
• Maintain knowledge of business systems, processes, regulations, and industry best practices.

Risk Management

• Monitor emerging security, privacy, and regulatory risks affecting the business.
• Conduct risk assessments and support risk register maintenance and treatment activities.
• Evaluate and score risks related to audit findings, exceptions, and attestations.
• Monitor, report, and escalate identified risks while driving remediation to acceptable risk levels.
• Collaborate with stakeholders to ensure risk exposure remains within approved tolerances.

Security Governance & Reporting

• Monitor compliance with security standards and controls.
• Review security metrics, compliance KPIs, and governance reports.
• Support security awareness and compliance initiatives.
• Prepare compliance and risk reports for management and key stakeholders.

Stakeholder & Customer Support

• Respond to customer security questionnaires, due diligence requests, and regulatory inquiries.
• Build strong relationships with internal and external stakeholders.
• Provide timely issue resolution, recommendations, and process improvements.
• Support projects from planning through completion, including reporting and recommendations.

Required Qualifications

Experience

• 3–4 years of experience in:
• Information Security
• Cybersecurity Compliance
• Governance, Risk & Compliance (GRC)
• IT Audit or Security Assurance

Compliance & Risk Knowledge

Strong understanding of:

• ISO 27001
• SOC 2
• NIST Cybersecurity Framework
• GDPR
• Risk Management methodologies

Technical Knowledge

Working knowledge of:

• Identity & Access Management (IAM)
• Multi-Factor Authentication (MFA)
• Vulnerability Management
• Logging & Monitoring
• Cloud Security fundamentals (Azure, AWS, GCP)
• Secure Change Management
• Data Protection & Encryption

Core Skills

• Audit coordination and evidence management
• Risk assessment and control testing
• Policy and procedure reviews
• Compliance reporting and documentation
• Stakeholder management and communication

Tools

Experience with:

• Microsoft 365
• Word and Excel (reporting and analysis)
• SharePoint / OneDrive
• GRC platforms such as Drata, Archer, LogicGate, or ServiceNow GRC

Education

Bachelor’s degree in information security, Computer Science, IT, Risk Management, or a related field.

Preferred Qualifications

Certifications

• ISO 27001 Internal Auditor or Lead Auditor
• Security+
• Certified in Cybersecurity (CC)
• CISA

Additional Knowledge

• DORA, CCPA, NYDFS
• Azure Defender / Security Center
• AWS Security Services
• Compliance metrics and KPI reporting

Soft Skills

• Executive presentations
• Project management
• Process improvement
• Training and coaching
• Cross-functional collaboration

Location: This role will be based out of The Leela Office located on the 4th Floor, Airport Road, Kodihalli, Bangalore- 560008.

Work Timing : 1 pm to 10 pm IST. Cab Pick-up and drop available.

Hybrid : Our expectation at this time, is that you would work from our office on Tuesdays, Wednesdays, Thursdays with flexibility to work from home on Mondays and Fridays.