IT Policies & Compliance Lead

Company Overview:

Petroexcel Technology Services Private Limited is a specialized technology solutions provider catering primarily to the energy, oil, and gas sectors. The company delivers robust digital infrastructure, enterprise software integration, and data management services designed to optimize operational efficiency in complex industrial environments. Operating out of Vadodara, Petroexcel serves a global clientele, focusing on high-stakes technical deployments that require stringent adherence to international safety and data standards.

Role Overview:

The IT Policies & Compliance Lead will serve as the primary architect for the organizations governance and risk framework. In this role, you will bridge the gap between technical operations and regulatory requirements, ensuring that all IT systems align with global security standards and internal business objectives. You will work closely with senior leadership, department heads, and external auditors to foster a culture of security and accountability. Your work will directly protect the companys digital assets and ensure seamless continuity in a highly regulated industrial landscape.

Key Responsibilities:

- Develop and implement comprehensive IT policies and standard operating procedures to ensure organizational alignment with global information security best practices.

- Lead internal and external IT audits, coordinating with stakeholders to remediate findings and strengthen the overall control environment.

- Manage the enterprise risk management framework by identifying, assessing, and mitigating IT-related risks that could impact business operations.

- Oversee regulatory compliance programs, including SOX and data privacy mandates, to ensure the company meets all legal and contractual obligations.

- Design and maintain robust IT controls to safeguard critical infrastructure and sensitive data against emerging cyber threats.

- Provide strategic guidance to executive management on IT governance matters, translating complex technical risks into actionable business insights.

Required Skillset:

- Demonstrated expertise in designing and enforcing IT governance frameworks within large-scale, complex technical environments.

- Proven ability to manage end-to-end IT audit lifecycles and regulatory compliance programs, including deep knowledge of SOX and global data privacy regulations.

- Strong analytical capabilities to translate technical vulnerabilities into business-level risk assessments and mitigation strategies.

- Excellent stakeholder management skills, with the ability to communicate complex compliance requirements to non-technical leadership and cross-functional teams.

- Professional certification such as CISA or CISM is essential to validate your technical and governance proficiency.

- A minimum of 10 to 20 years of experience in IT risk management, information security, or IT audit roles.

- Ability to work effectively in an on-site capacity at our Vadodara office, collaborating with diverse teams to drive a culture of compliance and security.