Manager

HCLTech; Chennai District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

HCLTech in India seeks an experienced Information Risk Management professional to lead risk assessments and remediation activities. The role involves partnering with service delivery leadership to communicate risk, roll out awareness programs, and ensure audit readiness across contractual security requirements.

The ideal candidate has 10+ years in information risk management or auditing, with expertise in PCI DSS, HIPAA, ISO27001, SOC2, SOX, NIST, FISMA, or COBIT, and strong leadership and

Qualifications

• Requires strong risk assessment and control selection knowledge.
• Experience with multiple compliance programs is preferred.
• Ability to communicate risk to non-IT stakeholders and manage junior staff.

Responsibilities

• Lead teams to execute periodic risk assessments and remediation efforts.
• Partner with delivery leadership to communicate and manage risk in service delivery.
• Develop and rollout programs to increase compliance awareness.
• Monitor compliance with contractual security requirements and company policies.
• Support external compliance certifications and internal assessments.
• Provide guidance to mitigate risks and enhance system security.
• Coordinate with other compliance representatives to build world-class components.

Skills

Risk management

Information security

Leadership

Communication skills

Problem solving

Policy governance

Education

Graduate or Master's in IT/Risk Management/Business Management

Job description

Key Responsibilities -

Perform the following functions:

• Required to have excellent understanding of the IT Control framework, in particular risk assessment and control selection
• Working experience in any two of the compliance programs (PCI DSS,HIPPA,ISO 27001,SOC2, SOX,NIST,FISMA,COBIT)
• Lead teams and efforts to ensure effective execution of periodic risk assessments and drive integration of remediation efforts with the risk management process
• Partner with service delivery leadership to both communicate and manage risk in delivery to an acceptable level
• Partner with awareness and training elements to develop and ensure rollout of programs to increase the level of awareness of compliance with policy and process
• Lead and perform activities to help measure and monitor compliance with contractual security requirements, company policies and procedures to ensure the account is compliant and audit ready
• Lead different compliance & audit testing programs and support successful completion of various external compliance certification programs and internal compliance assessments
• Proven ability to lead small teams dedicated to the performance of risk management and assessment responsibilities.
• Ability to provide effective management of junior employees.
• Develops and provides appropriate guidance on solutions to mitigate risks and enhance system security
• Coordinates with other DCO and Delivery Compliance representatives to build out world class compliance program components to include processes, procedures, and technologies.
• Deep understanding of privacy and business continuity requirements and support R&C Privacy and BCM teams in execution of their respective program
• Demonstrates ability to work in virtual team with help of tools and technologies
• Demonstrates ability to handle conflicting situation & should have strong verbal, written communication & analytical skills
• Must have systematic and pragmatic approach to problem solving
• Demonstrates good inter-personal skills, high standards of professional behaviour in dealings with business customers, colleagues and staff
• Have a good technical awareness and the aptitude to remain up to date with information security and IT developments
• Ability to communicate Risk to non IT business owners and support function such as delivery, HR, Admin, Legal, Contracting and others
• Ability to communicate risk at all levels of management up to and including C-Level executives.
• Translate business, industry, and regulatory requirements into information security objectives and associated tactical/strategic information security initiatives
• Certification such as CISA/CISSP/CISM /CRISC/ CGEIT/ISO27001 or any other security related certifications are preferred.

Education Qualification -

Graduate or master's degree in IT, Risk Management, Business Management, or a related field.

Certifications Required -

Certification such as CISA/CISSP/CISM /CRISC/ CGEIT/ISO27001 or any other security related certifications are preferred.

Attributes of Ideal Candidate –

• At least 10 years’ experience in Information Risk Management/Information Security or auditing. Direct client and leadership experience
• Preferably, experienced in any two of the compliance programs (PCI DSS,HIPPA,ISO 27001,SOC2, SOX,NIST,FISMA,COBIT)
• Excellent with Management Reporting, Reviews, Data Analytics
• Hands-on experience in Policy management and Governance, Risk modelling, Risk sensing and Data analytics.
• Ability to provide effective management of junior employees
• Demonstrates good inter-personal skills, high standards of professional behavior in dealings with business customers, colleagues, and staff