Qualysec

Join Our Team of Cybersecurity Innovators

Qualysec isn’t just a company, it’s a community of forward-thinking professionals dedicated to redefining cybersecurity. If you think you're passionate about making a real impact in the digital world, explore our career opportunities and discover how you can grow with us.

Cyber Security Compliance Lead

We are looking for a Cyber Security Compliance Lead to join our security team, who will be responsible for driving security compliance initiatives (SOC 2, HIPPA, ISO 27001, etc.), leading compliance strategy, and overseeing security governance while collaborating with the VAPT and technical teams to ensure compliance alignment across applications, systems, and infrastructure.

Job Description

Qualysec Technologies is hiring a Cyber Security Compliance Lead to drive and manage the organization’s cybersecurity compliance and governance initiatives. The role involves implementing and maintaining compliance programs aligned with global standards such as SOC 2, ISO 27001, and other regulatory frameworks while ensuring audit readiness and risk management.

The candidate will work closely with VAPT and technical teams to ensure security controls are properly implemented, documented, and compliant with industry standards. The role also includes identifying compliance gaps, leading remediation efforts, and strengthening overall security governance processes.

Experience

3 to 5 years of experience in information security compliance, governance, or cybersecurity domain.

Location

Bhubaneswar

Job Type

Full time

Responsibilities

  • Lead and manage cybersecurity compliance programs including SOC 2, ISO 27001, GDPR, and other regulatory frameworks
  • Develop, review, and maintain security policies, procedures, standards, and governance frameworks
  • Design and implement compliance strategies aligned with organizational security goals
  • Lead internal and external security audits, including audit preparation, evidence management, and auditor coordination
  • Map organizational security controls to industry compliance frameworks and ensure continuous compliance readiness
  • Collaborate with penetration testing, DevOps, and infrastructure teams to ensure security controls are implemented effectively
  • Identify compliance gaps and drive remediation planning with cross-functional teams
  • Oversee risk assessments, vendor security assessments, and control effectiveness reviews
  • Establish and improve compliance tracking mechanisms, reporting dashboards, and governance processes
  • Mentor and guide junior compliance and security team members
  • Monitor regulatory changes and update compliance programs accordingly
  • Act as a key point of contact for clients regarding security compliance and assurance requirements
  • Research on new compliance and cybersecurity documents

Skills Required

  • Strong expertise in information security governance, risk, and compliance (GRC)
  • Deep understanding of security frameworks such as SOC 2, ISO 27001/27002, GDPR, NIST, HIPAA, HITRUST, etc.
  • Working knowledge of penetration testing methodologies and vulnerability assessment processes
  • Understanding of OWASP Top 10, MITRE ATT&CK, SANS, CVSS scoring, and secure development practices
  • Experience in designing and implementing compliance programs and governance frameworks
  • Strong knowledge of cloud security, access control models, and infrastructure security best practices
  • Ability to translate technical security controls into business and compliance documentation
  • Experience working with audit processes, risk registers, and remediation tracking
  • Excellent documentation, presentation, and communication skills

Preferred Qualifications

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field.

Benefits

  • Competitive salary, great perks, and a work culture that’s as fun as it is rewarding
  • On-time salary
  • Paid time off and holidays
  • Leave encashment
  • Lunch provided
  • Provident Fund
  • Variable bonus
  • Plenty of room to experiment, innovate, and grow

About Us

Qualysec is a leading cybersecurity firm specializing in comprehensive penetration testing and risk assessment services. Our tailored solutions help businesses proactively defend against evolving cyber threats.

With over 5+ years of experience, we take pride in having served more than 200+ clients across 30+countries—a testament to our commitment to quality and resilience. Our dynamic work environment and employee-focused culture drive our continuous growth and success.

great place to work

Our Workplace Reviews Across Different Job Portals

Get an inside look at our company culture, values and experiences that make Qualysec a great workplace.

Apply now

Join Our Team of Cybersecurity Innovators

Now is the perfect time to stay one step ahead of evolving cyber threats by taking proactive security measures. Fill out the form, and our expert pentesters will help you identify and address vulnerabilities before they escalate.

Our interview process begins with:

1

CV Selection

Initial screening of applicant resumes.

arrow-line

2

HR Round

Interview focusing on company fit and policies.

arrow-line

3

Technical Round

Job-specific skills and knowledge assessment.

arrow-line

4

Manager Round

Final round with manager to assess team fit.

arrow-line

5

Welcome to Qualysec

Release of the offer letter and onboarding process starts.

    Click to Upload CV or Drag it here

    Scroll to Top
    Pabitra Kumar Sahoo

    Pabitra Kumar Sahoo

    COO & Cybersecurity Expert

    “By filling out this form, you can take the first step towards securing your business, During the call, we will discuss your specific security needs and whether our services are a good fit for your business”

    Get a quote

    For Free Consultation

    Pabitra Kumar Sahoo

    Pabitra Kumar Sahoo

    COO & Cybersecurity Expert