IT Compliance Manager – Web3 & Digital Assets

Job title Sox Compliance Officer

Reporting to Potentiam company background (The Employer) Potentiam is a global provider of highly qualified professionals to European SMEs from our offices in Romania, South Africa and India. Potentiam works with clients in finance, energy, leisure, marketing, business services and technology industries, providing technical, professional multi- lingual highly motivated staff, most of whom have had experience of working for international companies. Staff cover a wide range of roles from accounting, marketing, data management, HR, sales/account management, engineering, technology, and operations. Potentiam manages our staff’s career development and personal development training, all infrastructure, HR and payroll with our clients directly managing day-to-day staff responsibilities and role training and development. Company website - https://potentiam.co.uk/

Potentiam’s client: It is a leading provider of independent medical examinations, peer reviews, bill reviews, Medicare compliance, record retrieval, document management and related services. It provide IME services through their medical panel of credentialed physicians and allied medical professionals. Their independent medical review process is fully contained within their private cloud network. Custom portals, applications, workflow enhancements and systems integration are part and parcel of their service. Their clients include property and casualty insurance carriers, law firms, third-party claim administrators and government agencies that use independent services to confirm the veracity of claims by sick or injured individuals under automotive, disability, liability and workers' compensation insurance coverages. They help clients in the U.S., Canada, the United Kingdom and Australia manage costs and enhance their risk management processes by verifying the validity of claims, identifying fraud and providing fast, efficient and quality IME services.

Industry: legal, insurance, and healthcare services.

Purpose of role:

We are seeking a Compliance Officer to join our compliance team. This role is responsible for auditing IT control activities, ensuring adherence to Sarbanes Oxley (SOx) requirements, and maintaining governance standards. The ideal candidate will work closely with external auditors, perform Entity-Level Controls (ELCs), and document narratives, processes, and procedures in a fast paced environment. Potentiam | Job Specification 2 of 2

Duties and responsibilities: Compliance & Audit Activities • Audit IT control operations performed by IT Controls Analysts to ensure compliance with SOx requirements. • Perform walkthroughs and testing of ITGCs and ELCs to validate control design and operating effectiveness. • Develop, maintain, and update SOx narratives, process flows, and control documentation. • Coordinate and liaise with external auditors during SOx audits and provide requested evidence. • Identify control gaps and recommend remediation plans in collaboration with stakeholders. • Experience with ISO 27001 and NIST CSF, including understanding of information security controls, risk management, control assessments, compliance requirements, and security governance practices. • Familiarity with Cyber Essentials Plus (CE+) and related security/compliance requirements, along with knowledge or experience using Vanta or similar GRC/compliance management platforms, is a strong plus. Governance & Reporting • Prepare compliance reports and dashboards for management review. • Ensure timely completion of SOx testing cycles and documentation updates. • Support risk assessments and contribute to strengthening the overall control environment. Collaboration & Communication • Work closely with IT, Finance, and Compliance teams to align SOx requirements with business processes. • Act as a point of contact for external auditors and internal stakeholders. • Provide training and guidance on SOx compliance and control documentation standards.

Skills/Experience • Experience in SOx compliance, auditing, and governance processes. • Strong knowledge of Entity-Level Controls (ELCs), ITGCs, and SOx documentation standards. • Experience with ISO 27001 and NIST CSF, including security controls, risk assessment, and compliance. • Familiarity with CE+ and Vanta or similar GRC/compliance platforms is a strong plus. • Ability to create and maintain narratives, process flows, and control matrices. • Excellent communication and stakeholder management skills. • Detail-oriented with strong analytical and problem-solving capabilities. Why Join Us? • Opportunity to play a critical role in compliance and governance initiatives. • Collaborative team environment with exposure to senior leadership and external auditors. • Professional growth in a dynamic, fast-paced environment.

Additional benefits • Health Insurance • Referral Bonus • Performance Bonus • Flexible Working options

Location and hours Bangalore Office / UK hours

Read less

Company Name: Money Honey Financial Services Pvt Ltd Company Profile: We are a one-stop financial services shop, widely known for quality of its advice, personalized service and cutting-edge technology. We started our journey in 2008. Currently we are serving more than 50,000 investors with a team of 100 members. Our core product offering is mutual fund, FD, Govt. Bonds, Debenture, etc. Role Description: This role directs the entire IT infrastructure, software engineering, and digital transformation strategy to support secure, scalable, and compliant technology and business operations.  

Skills and Experience Required:  15+ years in IT delivery, application development, and enterprise architecture, with leadership tenure in regulated financial environments.  Strong background in enterprise application architecture, cloud migrations (AWS/Azure/GCP), API integrations, and scalable database management using Microsoft and open source technology stack  AI / ML Strategy: identifying and implementing high-impact use cases for Generative AI, Agentic AI, predictive analytics, and process automation  Domain Expertise: Deep understanding of financial services (mutual fund, corporate fixed deposits, bonds etc.) and critical financial workflows  

Responsibilities:

  Strategic Technology Leadership: Define and execute the long-term technology vision, digital transformation roadmaps, and engineering strategies aligned with business growth.

  Application Development & Delivery: Oversee IT development functions, software product engineering, and core transaction platforms ensuring high availability and minimal downtime

 Infrastructure & Operations Management: Manage robust cloud and on premise infrastructure, network architecture, and 24/7 production support systems

 Governance, Risk & Compliance (GRC):Ensure adherence to ISO standards, regulatory frameworks, data privacy laws, and stringent cybersecurity standards Location: Goregaon (W), Ram Mandir road, Mumbai Work Model:

Work from office (all working days) 

Position: Manager – Information Security

Experience: 8+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

? Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

? Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

? Oversee security risk assessments, audits, and remediation plans across IT and business units.

? Manage a team of security professionals; mentor, coach, and evaluate performance.

? Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

? Lead incident response, RCA, and post-mortem reviews.

? Drive security awareness and training programs across the organization.

? Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

? Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

? Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

? Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

website: www.glansolutions.com

Job Description – Technical Head

Industry: Fintech / Financial Services

Experience: 15–20+ years (20 years preferred)

Location: Noida

Reporting To: CEO / Managing Director

Job Summary

We are looking for an experienced Technical Head to lead and manage the company's IT team, technology infrastructure, software development, and fintech platforms. The candidate will be responsible for ensuring technology reliability, security, scalability, and alignment with business objectives.

Key Responsibilities

• Lead and manage the IT team, including developers, infrastructure, and technical support professionals.
• Oversee software development, application maintenance, system integration, and technology implementation.
• Manage fintech platforms, payment systems, banking APIs, and third-party integrations, as applicable.
• Ensure IT infrastructure, cloud systems, databases, and applications operate securely and efficiently.
• Implement cybersecurity measures, data protection, disaster recovery, and business continuity processes.
• Manage technology projects, vendors, budgets, and delivery timelines.
• Coordinate with senior management to develop and execute technology strategy.
• Ensure compliance with applicable regulatory, security, and IT governance requirements.

Required Qualifications & Experience

• Bachelor's or Master's degree in Computer Science, IT, or a related field.
• 15–20+ years of experience in IT, with 20 years preferred.
• Proven experience in technology leadership and IT team management.
• Strong knowledge of software architecture, APIs, databases, cloud infrastructure, cybersecurity, and DevOps.
• Experience in fintech, banking, payments, or financial services preferred.
• Strong leadership, problem-solving, project management, and communication skills.

Work Location: In person

Cyber Security Expert

We are seeking a highly skilled Cyber Security Expert with strong expertise in AI-driven

security tools and ethical hacking techniques. The ideal candidate will safeguard our digital

infrastructure, proactively identify vulnerabilities, and design intelligent defense mechanisms

against evolving cyber threats.

Key Responsibilities

• Threat Analysis: Identify, assess, and mitigate potential risks across systems and

networks.

• AI Security Tools: Deploy and manage AI-based solutions for intrusion detection,

anomaly monitoring, and predictive threat modelling.

• Ethical Hacking: Conduct penetration testing, simulate cyber-attacks, and recommend

remediation strategies.

• Incident Response: Lead investigations, contain breaches, and implement recovery

measures.

• Compliance & Governance: Ensure adherence to data protection laws, industry

standards, and organizational policies.

• Training & Awareness: Educate employees on best practices and emerging threats.

Required Skills & Qualifications

• Proven hands-on experience with AI-powered security platforms (e.g., SIEM, SOAR,

ML-based anomaly detection).

• Strong knowledge of ethical hacking tools (Metasploit, Burp Suite, Kali Linux, etc.).

• Expertise in network security, firewalls, IDS/IPS, and endpoint protection.

• Familiarity with cloud security (AWS, cloud platform).

• Proficiency in scripting languages (Python, Bash, PowerShell) for automation.

• Solid understanding of cryptography, authentication protocols, and secure coding

practices.

Job Title: Chief Manager – IT Infrastructure & Security

Location: Gurgaon

Experience: 12+ year in same

Qualification: B.Tech/MCA

Preferred Certifications: Palo Alto PCCSE, CyberArk, Nutanix NCP, VMware VCP, CCNP.

Must have exp in Server, network, firewall, edr, virtualization system (vm-ware, dutanix)

Technical Experience Required:

• AWS (Amazon Web Services) and/or Microsoft Azure
• VMware ESX / ESXi
• Windows Server
• Active Directory (AD)
• Kaseya
• DNS & DHCP
• Forcepoint / Websense
• Kaspersky AV
• Cisco networking
• SAN (Storage Area Network)
• Core Networking Tech: VoIP (Voice over IP), VPN (Virtual Private Network), TCP/IP, WAN/LAN/WLAN routing, and switching protocols.

Key Deliverables

Infrastructure Architecture & Operations

• Own the scoping, architecture and design of new infrastructure that will support the business.
• Administer HP Infrastructure, Nutanix HCI, Dell VxRail, VMware, Windows and Linux environments.
• Architect, monitor and maintain Active Directory services, File Services, Server Infrastructure and WAN/LAN/WLAN supporting business-critical systems.
• Be responsible for server, storage, network, security and monitoring hardware, software and services, ensuring they are optimised for availability, stability, integrity, performance and scalability.
• Forecast demand for storage, computing and network capacity, and take appropriate action before capacity limits are reached.
• Maintain IT hardware and software — including servers, peripherals, network nodes, terminals and wiring — manage equipment inventory and the hardware life cycle.

Network & End-User Computing

• Manage LAN/WAN, VPN, Cisco routing/switching and Cisco Meraki WiFi environments.
• Troubleshoot and quickly resolve network issues.
• Oversee end-user computing — laptops, desktops, printers, AV devices, iOS devices/iPad, MDM and endpoint management — and end-user support operations across Head Office, Stores and Warehouse. Security, Identity & Compliance
• Manage Palo Alto firewalls, SentinelOne EDR/XDR, CyberArk PAM, GTB DLP and Forcepoint/ForceScout security platforms.
• Perform regular security monitoring to identify any possible intrusions.
• Manage certificate/PKI and domain/DNS services, including issuance, renewal, rotation and revocation.
• Establish and maintain corporate IT infrastructure standards for configuration and security.
• Ensure IT governance, audit and compliance requirements are met.

Continuity, Backup & Performance

• Define, implement, test and maintain data back-up and recovery protocols to ensure availability.
• Drive business continuity, backup, disaster recovery and infrastructure modernisation projects.
• Be accountable for measuring and optimising application and infrastructure performance, and lead recovery actions after system failures.
• Monitor and maintain infrastructure stability against defined KPIs.

Leadership, Vendor & Governance

• Provide support to, manage and train the IT Infrastructure team.
• Manage vendor relationships, budgets, SLAs and team performance.
• Project-plan with clear and concise communication methods.
• Prepare and maintain documentation of the IT infrastructure.

Additional Technical Competencies

The candidate must have experience in one or more of the following areas:

Network & Infrastructure Engineering

• Proficient understanding of IP networking: Cisco, TCP/IP, Window Server, Network Security, Cloud Servers that includes technical and functional understanding of network security, VOIP, WAN, LAN, and internet routing and switching protocols, wireless and VPN capabilities.
• Demonstrated Data Center/Server Room build out experience (Power, Network, Cooling, etc...).
• Expertise in VMware ESX, SAN, Monitoring tools, and Operating Systems (strong understanding of Windows).
• Experience in managing VMware environment.
• Experience in managing cloud-based infrastructure like AWS/Azure.
• Expertise in windows environment in domain/Forrest/DNS/DHCP. System Administration & Maintenance
• Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements.
• Use of system management tool Kaseya and development of new scripts in this tool for deployment of policies.
• Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.
• Manage processes to Create, change, and delete user accounts per request from HR.
• Repair and recover from hardware or software failures. Coordinate and communicate with impacted constituencies.

Security, Backups & Data Protection

• Skilled in managing websense/forcepoint DLP/Web security.
• Experience in managing Kaspersky antivirus system.
• Perform regular security monitoring to identify any possible intrusions.
• Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.
• Closely monitoring and developing the procedures for backups of the servers.
• Perform regular file archival and purge as necessary.

Monitoring, Testing & Troubleshooting

• Perform daily system monitoring, verifying the integrity and availability of all hardware, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups.
• Daily monitor the Server Event Logs, Firewall and other security equipment logs and also the logs of scheduled archival software.
• Test the operating system software, the networking software and also the computer hardware.
• Must possess the initiative to resolve issues before they become critical.

Project Management & Documentation

• To assist IT Head for technical issues on various projects such as support on testing, rolling out and execution of projects.
• Strong written communication skills including documentation.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743

Job Summary

We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.

The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.

Key Responsibilities

• Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
• Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
• Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
• Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
• Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
• Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
• Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
• Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
• Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
• Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.

Required Skills & Experience

• 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
• Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
• Experience with one or more enterprise risk technology platforms, such as:
• RSA Archer
• ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
• Other enterprise GRC and risk management platforms
• Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
• Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
• Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
• Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
• Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
• Strong communication, problem-solving, strategic planning, and decision-making skills.

Preferred Qualifications

• Experience in banking, financial services, insurance, or other regulated industries.
• Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
• Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
• Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.

Key Competencies

• Enterprise GRC Technology Strategy
• Technology Delivery & Programme Leadership
• Risk Platform Implementation and Optimization
• Stakeholder & Vendor Management
• Process Automation and Digital Transformation
• AI/GenAI and Analytics Enablement
• Global Team Leadership
• Governance, Controls and Continuous Improvement

Hiring: Manager – Business Development | Digital Trust & Security (DT&S)

Are you a seasoned Business Development professional with experience in Cybersecurity Assurance, Compliance, and Digital Trust Services? We are looking for a dynamic leader to drive strategic growth, build high-impact partnerships, and expand market presence across India.

📍 Location: Pan India (WFH/Remote)

💼 Employment Type: Full-Time

📅 Workdays: Monday – Friday

Key Responsibilities

🔹 Strategic Sales Leadership

• Drive regional and national revenue growth for Digital Trust & Security Assurance and Training Services.
• Manage sales forecasting, pipeline development, and target achievement.
• Work closely with operations and delivery teams to create customized client solutions.

Partnership Development & Alliances

• Build and manage strategic partnerships with consulting firms, technology companies, training organizations, industry associations, and government bodies.
• Develop reseller and affiliate programs to expand market reach.
• Manage partnership agreements, MoUs, and alliance performance metrics.

Market Intelligence & Growth Initiatives

• Track cybersecurity, compliance, and regulatory trends.
• Identify new business opportunities aligned with evolving industry standards.
• Represent the organization at industry events, conferences, and networking forums.
• 
  

What We're Looking For

1. 5+ years of B2B Business Development experience
2. Minimum 2 years in Cybersecurity Services / Assurance / Compliance domain
3. Prior experience in Cybersecurity Assurance, QSA, PCI DSS, ISO 27001, or related services is mandatory
4. Strong expertise in strategic partnerships and key account management
5. Excellent consultative selling, negotiation, and stakeholder management skills
6. Ability to engage and influence CXO-level decision makers
7. Experience with CRM platforms and sales analytics tools

Education

Bachelor's Degree in Business, Engineering, Science, or related field

MBA/PGDM in Marketing, Sales, or related specialization preferred

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

Position: Manager – Information Security

Experience: 10+ years

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

mail updated resume with salary details-

email: etalenthire[at]gmail[dot]com

satish: 88 O2 74 97 43