Risk Management & Compliance Manager
Adrosonic · Mumbai, India ·
- Category
- Legal
- Experience
- 15+ years
Responsibilities:
Enterprise Risk Management
Own organisation-wide Risk Register (RISK Matrix) with clear mitigation deadlines & owners.
Implement proactive RAID Logs for Delivery & Support teams.
Conduct periodic risk review meetings with functions (Delivery, P&C, CRM, Finance, Legal, InfoSec).
Compliance Monitoring & Control
Govern adherence to ISO 27001 controls, privacy regulations, NDA terms, and client compliance
requirements.
Align delivery governance to CMMI L5 practices (metrics, audits, improvements).
Coordinate internal audits & readiness for external audits (ISO, client assessments, security reviews).
Policy & Process Oversight
Ensure organisation-wide compliance with:
Data handling & InfoSec policies
Vendor onboarding & background checks
Access controls & offboarding
Delivery governance policies (PMO, Change Control, Defect Handling, Documentation Standards)
Incident & Breach Management
Own the Incident Reporting & RCA Framework with closure timelines and preventive actions.
Act as escalation SPOC for process violations, access breaches, commercial deviations, or regulatory
risk.
Reporting & Governance Dashboard
Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green.
Track slippages and push corrective actions with leadership sign-off.
Reporting & Governance Dashboard
Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green.
Track slippages and push corrective actions with leadership sign-off.
Support
Sales & Delivery with compliance inputs for RFPs, SoWs, Contracts,
Security Responses, QBRs.
Participate
in client audits and governance reviews as compliance representative
Requirements
Required Skills & Experience
- 12-15
+ yrs in Risk, Compliance, Delivery Governance, PMO, or Security
Compliance within IT services.
- Hands-on
understanding of ISO 27001, GDPR/DPA, CMMI, IT service governance,
audit frameworks.
- Experience
working closely with Cross-functional teams – Delivery, Architecture,
QA, P&C, CRM, Finance, Legal.
- Ability
to design policies, track control gaps, drive enforcement, and escalate
when required.
Behavioural Attributes
- High
integrity and courage to challenge gaps.
- Detail-oriented
with strong follow-through.
- Strong
documentation discipline.
- Confident
in communication with CXOs & clients.
- Bias
for proactive governance rather than reactive policing.
Success Metrics (KPIs)
- Reduction
in repeat incidents/non-compliances
- Audit
success rate (internal + external + client)
- % of
governance SLAs met across functions
- On-time
closure of risks & corrective actions
- CSAT
confidence on compliance (client + internal)