Manager - Governance and Compliance (Contractor) in भारत

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Manager - Governance and Compliance (Contractor) based in India. This is a full-time remote leadership role focused on strengthening security, risk, compliance, and AI governance across a globally distributed organization. You will help shape long-term governance strategies while remaining closely involved in day-to-day execution and operational improvements. The role combines cybersecurity, regulatory compliance, privacy, AI safety, and technology risk management in a fast-moving environment. You will establish policies, controls, and security guardrails that protect sensitive information, systems, intellectual property, and client data. Working across regions and time zones, you will partner with technical and business stakeholders as well as clients, auditors, and external specialists. The position offers significant influence over security maturity, audit readiness, responsible AI adoption, and operational resilience. A hands-on, proactive mindset is essential, with the opportunity to drive meaningful improvements across both internal operations and client-facing engagements. Accountabilities: - Develop, maintain, and enforce security, compliance, risk, privacy, AI governance, and operational policies, standards, processes, and supporting tools in line with business objectives. - Establish governance frameworks and security guardrails for Generative AI and Machine Learning tools, addressing risks such as IP leakage, shadow AI, unauthorized data ingestion, and unsafe usage. - Define AI governance and security architecture standards for client-facing projects, ensuring data confidentiality, algorithmic transparency, regulatory alignment, and adherence to client security requirements. - Conduct AI risk assessments and audits covering prompt injection, training data provenance, bias mitigation, third-party AI capabilities, and emerging AI security risks.

- Serve as a subject matter expert on applicable regulations and provide compliance guidance to clients and internal stakeholders, embedding effective compliance processes into assessments and delivery activities. - Oversee compliance with global and regional privacy requirements, including India's DPDP Act, GDPR, CCPA, and PDPA, with particular attention to cross-border data transfers. - Oversee IT infrastructure security, monitoring, maintenance, and adherence to established security best practices. - Mature the security program through penetration testing, disaster recovery exercises, cloud security posture management, and other proactive security initiatives. - Integrate DevSecOps and Secure SDLC practices into internal and client development pipelines, including software supply chain security, dependency scanning, and SBOM management. - Champion Zero Trust security principles, least-privilege access, RBAC, and robust identity and access management practices. - Lead security and compliance incident response, including severity assessment, resource allocation, containment, and remediation. - Manage and optimize security technologies such as SIEM, DLP, EDR, vulnerability scanning, endpoint management, Microsoft Sentinel, Microsoft Defender, and development secret-scanning solutions. - Drive organization-wide security awareness initiatives, including phishing simulations, employee training, AI risk education, and social engineering awareness. - Lead compliance programs and audits while acting as the primary liaison with external auditors, vCISO providers, and other assurance partners. - Evaluate emerging technologies and lead strategic initiatives that improve operational efficiency, security maturity, and business agility. - Manage vendor and technology partner relationships, including contract negotiations, third-party risk assessments, AI vendor evaluations, and service-level oversight.