MG

Quality and Compliance Specialist

Mantaa Globallinkedin.com
Oct 2, 2026, 11:55 PM3w ago
Full-timeColombo, Western ProvinceMid level (2+ yrs)

About the role

The Privacy & Compliance Specialist will lead privacy, compliance, and information security governance across the organization. The role involves preparing and maintaining systems, policies, and evidence for ISO 27001, ISO 27701, ISO 27017, ISO 27018, and data protection requirements. Key responsibilities include supporting ISO 27001/ISMS implementation, leading privacy management aligned with ISO 27701 and GDPR, maintaining risk registers, developing policies, managing data inventories and privacy impact assessments, coordinating compliance evidence for audits, and working with technical teams to ensure compliance. The position requires strong documentation, organizational, and communication skills, as well as the ability to collaborate with both technical and non-technical teams.

Must have

  • ISO 27001 / ISMS
  • ISO 27701 / Privacy Information Management
  • Risk assessment and risk management
  • Policies, procedures and control frameworks
  • Audit preparation and evidence management
  • Vendor/supplier risk management
  • GDPR and data protection principles
  • Data mapping and RoPA
  • DPIAs
  • Data retention and deletion
  • Data-subject rights
  • DPAs and subprocessors
  • International data transfers
  • Privacy by design
  • Degree/diploma in Law, Compliance, Privacy, Cybersecurity, IT, Risk Management or a related field.
  • 2–5 years of practical privacy, compliance, GRC or information security experience.
  • Demonstrated experience developing policies, maintaining compliance documentation and managing audit requirements.
  • Strong documentation, organizational and communication skills.
  • Ability to work closely with technical and non-technical teams.

Nice to have

  • ISO 27001 Lead Implementer or Lead Auditor
  • ISO 27701 experience/certification
  • CIPP/E, CIPM or CIPT
  • Experience with ISO 27017/27018
  • Experience with SaaS/cloud companies
  • Experience working with external auditors
  • Understanding of AI/data privacy requirements

Technologies

  • Cybersecurity
  • ISO 27001
  • SaaS