Be an Early Applicant
The Role
Own enterprise risk management, compliance monitoring, policy oversight, incident and breach management, audit readiness, and executive governance reporting. Maintain risk registers, control frameworks, and corrective-action tracking while ensuring adherence to ISO 27001, privacy regulations, NDAs, client requirements, and CMMI practices. Support sales and delivery teams with compliance inputs and represent the organization in client audits and governance reviews.
Summary Generated by Built In
Responsibilities:
Enterprise Risk Management
Own organisation-wide Risk Register (RISK Matrix) with clear mitigation deadlines & owners.
Implement proactive RAID Logs for Delivery & Support teams.
Conduct periodic risk review meetings with functions (Delivery, P&C, CRM, Finance, Legal, InfoSec).
Compliance Monitoring & Control
Govern adherence to ISO 27001 controls, privacy regulations, NDA terms, and client compliance
requirements.
Align delivery governance to CMMI L5 practices (metrics, audits, improvements).
Coordinate internal audits & readiness for external audits (ISO, client assessments, security reviews).
Policy & Process Oversight
Ensure organisation-wide compliance with:
Data handling & InfoSec policies
Vendor onboarding & background checks
Access controls & offboarding
Delivery governance policies (PMO, Change Control, Defect Handling, Documentation Standards)
Incident & Breach Management
Own the Incident Reporting & RCA Framework with closure timelines and preventive actions.
Act as escalation SPOC for process violations, access breaches, commercial deviations, or regulatory
risk.
Reporting & Governance Dashboard
Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green.
Track slippages and push corrective actions with leadership sign-off.
Reporting & Governance Dashboard
Publish monthly Compliance & Risk Dashboard to EXCO with status: Red/Amber/Green.
Track slippages and push corrective actions with leadership sign-off.
Support
Sales & Delivery with compliance inputs for RFPs, SoWs, Contracts,
Security Responses, QBRs.
Participate
in client audits and governance reviews as compliance representative
Requirements
Required Skills & Experience
- 12-15
+ yrs in Risk, Compliance, Delivery Governance, PMO, or Security
Compliance within IT services.
- Hands-on
understanding of ISO 27001, GDPR/DPA, CMMI, IT service governance,
audit frameworks.
- Experience
working closely with Cross-functional teams – Delivery, Architecture,
QA, P&C, CRM, Finance, Legal.
- Ability
to design policies, track control gaps, drive enforcement, and escalate
when required.
Behavioural Attributes
- High
integrity and courage to challenge gaps.
- Detail-oriented
with strong follow-through.
- Strong
documentation discipline.
- Confident
in communication with CXOs & clients.
- Bias
for proactive governance rather than reactive policing.
Success Metrics (KPIs)
- Reduction
in repeat incidents/non-compliances
- Audit
success rate (internal + external + client)
- % of
governance SLAs met across functions
- On-time
closure of risks & corrective actions
- CSAT
confidence on compliance (client + internal)
Skills Required
- 12–15+ years of experience in risk, compliance, delivery governance, PMO, or security compliance within IT services
- Hands-on understanding of ISO 27001
- Hands-on understanding of GDPR and DPA requirements
- Hands-on understanding of CMMI practices
- Hands-on understanding of IT service governance
- Hands-on understanding of audit frameworks
- Experience working with Delivery, Architecture, QA, P&C, CRM, Finance, and Legal teams
- Ability to design policies, track control gaps, drive enforcement, and escalate issues
- High integrity and willingness to challenge gaps
- Strong attention to detail and follow-through
- Strong documentation discipline
- Confident communication with CXOs and clients
- Proactive governance approach
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
ADROSONIC is a global IT consulting and digital engineering firm that helps enterprises unlock business value through data, automation, and digital solutions. It supports transformation from idea to outcome, combining innovation, insight, automation, and technologies such as Microsoft Dynamics 365 and Power Platform. The company serves insurance, banking and finance, nonprofit, and e-commerce and retail organizations, delivering scalable, secure, measurable outcomes.
