- Evaluate organizational compliance with standards and regulations, including PCI-DSS, PCI-3DS, ISO 27001, ISO 27701, SOC 2 Type 2, and applicable local regulation's requirements.
- Assess internal controls, identify risks, and prepare detailed audit and compliance reports.
- Conduct IT risk assessments, document findings, recommend improvements, and collect evidence for external audits.
- Collaborate with business process and control owners to design and implement remediation plans.
- Coordinate effectively with internal stakeholders and external auditors to ensure alignment and compliance.
- Support the preparation and maintenance of business documents, policies, and compliance questionnaires.
Requirements
- Professional certification(s) such as CISSP, CISM, CISA, CRISC, CIPP, or equivalent expertise in data security, privacy laws, and compliance program management.
- Strong ability to work independently as well as collaboratively across teams and functions.
- Solid knowledge of IT controls, governance frameworks, and regulatory standards.
- Excellent command of English with mature, clear, and professional communication skillsboth written and verbalto effectively engage with internal stakeholders, external auditors, and global regulatory partners.
At 2C2P, we offer an attractive remuneration package, a fast-paced and exciting working environment, and provide challenging opportunities for life-long learning and career development.
Interested candidates are invited to send your comprehensive resume with current and expected salary package via this job ad. Please note that only shortlisted candidates will be notified.
Please consult our Candidate Privacy Notice to know more about how we collect, use, transfer and disclose our candidates information: https://2c2p.com/candidate-privacy-notice.
By submitting your resume and information, you understand, acknowledge, and consent that your personal data will be processed in accordance with our Candidate Privacy Notice. You consent to the collection, use, transfer and disclosure of your personal data as well as to receive email and/or other electronic messaging communication from 2C2P.
