Manager – Governance and Compliance

Ollion

. Drive the organization’s long-term strategy for Security, Risk & Compliance, and AI Governance .

Posted 10/7/2026full-timeRemote • IndiaSeniorLead💰 ₹1,200 - ₹1,776 per hourWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security, Risk & Compliance management, with a strong focus on AI Governance and regulatory compliance. Proficient in developing security programs, conducting risk assessments, and implementing frameworks to ensure cyber readiness and data protection.

Highest-signal resume keywords

Security Program ManagementAI Governance FrameworksCompliance Audits (SOC 2, ISO 27001)Cloud Security Best PracticesIncident Response Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk AssessmentData PrivacyAI SafetyDevSecOpsZero Trust ArchitectureVulnerability ScanningPenetration TestingRegulatory ComplianceCloud Technologies

Soft Skills

Analytical SkillsProblem-SolvingTime ManagementCollaborationCommunication Skills

Tools & Technologies

SIEMDLPEDRMicrosoft SentinelMicrosoft DefenderTicketing SystemsCSPMDependency ScanningSecret Scanning ToolsAI Risk Training Tools

Certifications & Qualifications

CCSPCISSPCISMCRISC

Industry Keywords

AI GovernanceData Protection StandardsGDPRCCPAPDPAMITRE ATT&CKNISTCISISO 42001Cloud Security

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformSDLC

About the role

Key responsibilities & impact

Drive the organization’s long-term strategy for Security, Risk & Compliance, and AI Governance
Manage and execute security programs, AI governance frameworks, and compliance requirements
Develop and maintain policies, standards, processes, and tools for cyber readiness, regulatory compliance, AI governance, and operational excellence
Establish and enforce acceptable-use policies and security guardrails for Generative AI and Machine Learning tools
Define AI governance and security architecture standards for client-facing projects
Conduct AI risk assessments and audits covering prompt injection, training data provenance, bias mitigation, and third-party AI features
Provide compliance consulting and guidance to clients
Embed compliance processes into assessments and coordinate in-house or partner execution
Ensure compliance with privacy regulations and manage cross-border data transfers
Oversee IT infrastructure security, monitoring, and maintenance
Mature the security program through penetration testing, disaster recovery simulations, and CSPM
Integrate DevSecOps and Secure SDLC practices, including dependency scanning and SBOM management
Enforce Zero Trust architecture, least privilege, and RBAC
Lead incident response, including severity determination, resource assignment, and threat containment
Manage SIEM, DLP, EDR, vulnerability scanning, endpoint management, ticketing, Microsoft Sentinel, Microsoft Defender, and secret scanning tools
Drive security culture, phishing simulations, employee awareness, and AI-risk training
Lead compliance programs and audits; liaise with auditors and vCISO providers
Evaluate emerging technologies and lead strategic digital initiatives
Manage vendors and technology partners, negotiate contracts, conduct third-party risk assessments, and monitor service levels
Perform other duties of a similar level and responsibility

Requirements

What you’ll need

8+ years of experience in a Senior IT, Security, or Compliance role
At least 2 years in a leadership position managing a technical team
Understanding and experience in cloud technologies
General familiarity with GCP, AWS, and Azure
Proven track record leading and passing SOC 2, ISO 27001, and ISO 42001 audits
Strong understanding of AI governance frameworks, AI safety, data privacy in AI pipelines, and LLM threat modeling
Practical knowledge of MITRE ATT&CK, CIS, NIST, ISO, and related frameworks
Knowledge of global and regional data protection standards, including India DPDP Act, GDPR, CCPA, and PDPA
Knowledge of networking, identity access policies, and cloud security best practices
Exceptional written and verbal communication skills
Strong analytical and problem-solving abilities
Effective time management skills
Ability to collaborate across teams and adapt to evolving business needs
Experience developing and managing departmental budgets and negotiating with vendors
Industry certification(s) in Information Security, such as CCSP, CISSP, or CISM, or Risk Management, such as CRISC
B.S. in Computer Science, Information Technology, Information Systems, or IT Management

Benefits

Comp & perks

Full-time remote work from anywhere in India
Flexible working hours to support global collaboration and business needs
Inclusive and diverse workplace
Equal opportunity employment