Senior/Lead - Infosec
Confirmed on the employer's own hiring board on Oct 20, 2026. First seen by Alion on Oct 19, 2026.
About us:
The global hiring revolution is shaping a future where talent can thrive everywhere, driving innovation and progress on a global scale.
Multiplier is at the forefront of this change. By removing barriers and simplifying global hiring, we’re creating a level playing field where businesses and individuals - (like you) - can compete, grow, and succeed, regardless of geography.
Multiplier empowers companies to hire, onboard, manage, and pay talent in 150+ countries, quickly and compliantly. Our mission is to build a world without limits, where ambitious businesses can look beyond borders to build their global dream teams. Our unified employment platform, complete with world-class EOR, AOR and Global Payroll products, means it has never been easier to seize the global hiring opportunity.
We’re backed by some of the best in the business, (Sequoia, DST, and Tiger Global), are led by industry-leading experts, scaling fast, and seeking brilliant like-minded enthusiasts to join our team. The future is borderless. Let’s build it together.
What’s the opportunity?
Multiplier is building a function that has never existed here before: someone who owns compliance and personally works inside the cloud environment that compliance governs, rather than splitting the two across separate people. This role covers global compliance frameworks including ISO 27001, SOC 2, GDPR, and DPDPA, alongside internal financial controls and statutory audits (ITGC/ITAC) across EOR and advisory. You will drive GRC automation and continuous compliance, and you will also be the one who logs into AWS and GCP to validate controls yourself, not someone who hands that work to an engineering team.
A key focus area will also include leveraging AI-driven controls and analytics to enhance control and process violation detection, compliance monitoring, and risk intelligence across the enterprise.
What you'll do:
Strong interpersonal and stakeholder management skills to collaborate with executive and audit teams to align business, finance, and security goals
Develop and execute cybersecurity governance, strategy, and operational procedures for group companies.
Oversee technical risk, compliance, and data security, especially for applicable compliances
Strategize readiness and execute IT statutory audits, including Internal Financial Controls (IFC), IT General Controls (ITGC), and IT Application Controls (ITAC).
Ensure adherance to Cybersecurity Framework, SOC 2, GDPR, ISO 27001, NIST, CIS, and DPDPA, among others.
Drive all GRC initiatives for information security and data privacy in the enterprise on the cloud and on-premises.
Drive continuous automation and improvement for audit readiness, technical documentation, and regulatory response
Conduct comprehensive Third Party Risk Assessments focused on information security and privacy risks, including vendor security posture evaluation, contractual security obligations, and ongoing monitoring of third-party controls
Performed SAR, Data Localisation and Tokenisation audits.
Performed user entitlement review, ITSM audits.
Define strategies and lead initiatives to automate Governance, Risk, and Compliance (GRC) processes, driving continuous compliance across all regulatory and statutory mandates
Establish and oversee AI security frameworks, ensuring compliance with security and data privacy requirements.
Implementation of SOC 1 and SOC 2 audit processes, including key dependencies and limitations regarding reliance on external SOC reports for control assurance
Core Competencies / Must Haves
Genuine hands-on comfort working inside cloud environments, not just reviewing documentation about them
Compliance as a core identity, not a side function to a technical specialty or a checklist exercise
GRC automation and continuous compliance
SOC 2, GDPR, and ISO 27001 enablement
Risk management and audit readiness
Data privacy, data governance, and data protection
Third Party Risk Assessment
Execution rigor and strategic planning
Qualifications:
ISO 27001, CISA/CISM, Privacy Certifications
Working on cloud environment (AWS, GCP etc)
Hands on experience in Enterprise security tool like DLP, IDS-IPS, Network security tools
Demonstrated Ai literacy in understanding data processing, security, and responsible Ai use.
Equal Employment Opportunity:
Multiplier is an equal opportunity employer: we value diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.