Job Overview
Location
Bangalore, India
Job Type
Full-time
Category
Software Engineering
Date Posted
June 3, 2026
Full Job Description
đź“‹ Description
- • Lead and participate in internal and external audits for compliance frameworks including ISO 27001/27701, PCI-DSS, NIST 800-171, NIST 800-53 (FedRAMP), and IRAP.
- • Manage and oversee enterprise-wide risk, compliance, and governance initiatives across multiple teams and departments.
- • Conduct comprehensive risk assessments, security audits, and third-party/vendor risk reviews to ensure alignment with regulatory standards.
- • Review contracts and service agreements to verify adherence to security and compliance requirements.
- • Identify gaps in existing controls and recommend actionable improvements to strengthen the organization’s security posture.
- • Communicate complex compliance requirements and risk findings clearly to both technical and non-technical stakeholders.
- • Perform regular user access reviews to ensure adherence to least-privilege principles and regulatory mandates.
- • Develop, track, and manage remediation plans for identified compliance gaps and security risks.
- • Maintain and continuously update the organization’s risk register with accurate, current data on threats, vulnerabilities, and mitigation status.
- • Oversee vendor security assurance processes, including evaluation of vendor controls and documentation of third-party compliance.
- • Collaborate with process owners, control owners, auditors, and external consultants to ensure audit findings are resolved in a timely manner.
- • Design and implement effective internal controls aligned with NIST, PCI-DSS, ISO 27001, FedRAMP, and other applicable frameworks.
- • Support cross-functional risk and security discussions, providing guidance on compliance obligations and control implementation.
- • Build and maintain strong working relationships across departments to foster a culture of compliance and accountability.
- • Leverage AI or automation tools to enhance, streamline, and scale Governance, Risk, and Compliance (GRC) workflows and processes.
- • Take on additional responsibilities as needed to support evolving organizational needs and regulatory demands.
🎯 Requirements
- • 8+ years of experience in cybersecurity programs, audits, risk management, compliance, or remediation
- • Bachelor’s degree in Information Systems, Computer Science, Information Security, or a related field
- • Proven experience auditing frameworks including PCI-DSS, SOC 2, and ISO 27001/27701
- • Strong hands-on experience with NIST 800-171, NIST 800-53 (FedRAMP), and IRAP
- • Familiarity with cloud platforms such as AWS, Azure, or Google Cloud
- • Relevant certifications such as CISSP, CISA, PCI ISA, or ISO are preferred
🏖️ Benefits
- • Flexible, trust-oriented culture that empowers employees to take full ownership of their roles
- • Emphasis on balancing productivity with self-care and well-being
- • Vibrant and dynamic work environment
- • Opportunity to work with a company recognized as a Forbes Cloud 100 member and Deloitte Tech Fast 500 winner
- • Potential for international travel as part of role responsibilities
- • Required overlap with U.S. Pacific Time (2:00 PM to 11:00 PM IST)
Skills & Technologies
About Workato, Inc.
Workato provides low-code/no-code enterprise automation and integration software that connects applications, data, and business processes across cloud and on-premises systems. Its platform offers pre-built connectors, recipes, and AI-powered workflow orchestration for finance, HR, IT, sales, support, and marketing functions. The company enables organizations to automate tasks without extensive coding, reducing manual effort and accelerating digital transformation initiatives. Workato serves mid-market to large enterprises worldwide through a subscription-based SaaS model, emphasizing security, governance, and scalability for complex integrations.
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
Similar Opportunities
Fair Isaac Corporation
2 months ago
Eli Lilly and Company
10 hours ago
