Compliance Lead (GRC)

Company Description

Engineering the AI-powered enterprise. With AI and cloud-native solutions, BETSOL accelerates cloud transformation for enterprises across 17+ countries. BETSOL holds several engineering patents, and is recognized with industry awards. BETSOL maintains a net promoter score that is 2x the industry average.  

BETSOL’s open source backup and recovery product line, Zmanda (Zmanda.com), delivers up to 50% savings in total cost of ownership (TCO) and delivers best-in-class performance.  

BETSOL Global IT Services (BETSOL.com) builds and supports end-to-end enterprise solutions, reducing time-to-market for customers.  

BETSOL offices are set against the vibrant backdrops of Broomfield, Colorado and Bangalore & Belagavi, India.  

We take pride in being an employee-centric organization, offering comprehensive benefits and opportunities.

Learn more at betsol.com

Job Description

About the Role

BETSOL is seeking a Compliance Lead to join our Governance, Risk, and Compliance (GRC) team. The Compliance Lead will be responsible for designing, implementing, and continuously improving the organization's compliance framework across IT and business functions. This role ensures adherence to regulatory, contractual, and industry standards while supporting audits, risk management, and governance initiatives.

Responsibilities

• Own and manage the compliance program covering Security, Privacy, and IT controls.
• Ensure alignment with frameworks such as ISO 27001, ISO 9001, SOC 2 Type II, PCI DSS, HIPAA, and GDPR.
• Develop, maintain, and update compliance policies, standards, and procedures.
• Conduct periodic control testing, evidence collection, and remediation tracking.
• Coordinate external audits, certification assessments, and readiness reviews.
• Lead internal compliance assessments and governance reviews.
• Manage compliance exceptions, deviations, and risk acceptance processes.
• Support vendor and third-party risk assessments.
• Collaborate with Security, IT, Engineering, HR, and Legal teams to address compliance gaps.
• Conduct compliance awareness and training programs.
• Maintain compliance dashboards, KPIs, audit records, and leadership reports.

Looking For

• 6+ years of experience in IT Compliance, Information Security Governance, GRC, Audit, or Risk Management.
• Experience managing compliance programs and regulatory audits.
• Strong understanding of security controls, risk management, governance processes, and audit methodologies.
• Experience working with cross-functional stakeholders in a fast-paced environment.

Mandatory Skills

A. Technical Skills

• Governance, Risk, and Compliance (GRC)
• ISO 27001, ISO 9001, SOC 2 Type II
• PCI DSS, HIPAA, GDPR
• Internal and External Audit Management
• Control Testing and Evidence Collection
• Risk Assessments and Risk Management
• Vendor and Third-Party Compliance Reviews
• Policy and Procedure Management
• Access Governance, Vulnerability Management, Change Management, and Incident Management

B. Soft Skills

• Strong stakeholder management
• Excellent communication and documentation skills
• Analytical and problem-solving abilities
• Attention to detail
• Collaboration and leadership skills

Good to Have Skills

• CISSP, CISA, CISM, CRISC
• ISO/IEC 27001:2022 Lead Auditor or Lead Implementer
• ISO 9001:2015 Lead Auditor or Lead Implementer
• CGRC
• PCI QSA
• SOC 2 Practitioner
• CCSP
• Experience working in cloud and SaaS environments

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Systems, or a related field.
• Master's degree preferred.

Additional Information

Working Hours: General shift with flexibility to support business and stakeholder requirements.

May require coordination with global stakeholders across different time zones as per business needs

Videos To Watch