Information Security Compliance Officer at Ascentech Services Limited

Role Overview

We are seeking a motivated professional to drive enterprise-wide compliance initiatives. The Information Security Compliance Officer will ensure adherence to ISO standards, global data protection laws, and internal governance frameworks. This role is responsible for conducting audits, performing gap assessments, maintaining compliance documentation, and collaborating with cross-functional teams to strengthen the organisation's security posture.

Key Responsibilities

Security Compliance Management

• Lead implementation and maintenance of ISO 27001, ISO 27701, ISO 22301, and related standards
• Develop, maintain, and audit ISMS documentation
• Conduct risk assessments, controls evaluation, and compliance reporting
• Ensure organisation-wide alignment with policies and procedures

Data Protection Governance

• Ensure compliance with GDPR, NDPR, DPDP, and other privacy regulations
• Maintain RoPA and Data Flow Diagrams
• Support DPIA and vendor privacy assessments
• Collaborate with the Data Protection Officer to resolve privacy gaps

Internal and External Audit Execution

• Plan and perform internal audits for security and IT controls
• Support external audits conducted by regulators and certification bodies
• Prepare audit evidence, reports, and maturity dashboards
• Ensure timely remediation of audit findings

Governance, Risk, and Compliance (GRC)

• Maintain risk registers and compliance matrices
• Align controls with NIST CSF, CIS, PCI DSS, and internal frameworks
• Conduct third-party risk assessments
• Collaborate with IT, HR, Legal, and Business units to ensure compliance

Awareness and Training

• Conduct training on information security and data privacy
• Lead phishing and DLP awareness programs
• Support development of SOPs, policies, and security playbooks

Required Skills & Competencies

• Strong understanding of ISO 27001, ISO 27701, ISO 22301, CIS, NIST, and PCI DSS
• Hands-on experience with compliance and audit frameworks