Manager - ARM

HCL Technologies Limited; Chennai District, Bengaluru; Híbrido; INR 2.000.000 - 3.600.000; Jornada completa

Descripción de la vacante

HCL Technologies Limited seeks an experienced Information Risk Manager to lead end-to-end compliance, information security, and data protection programs within a global outsourcing setup.

You will conduct risk assessments and audits, drive governance with leadership, and ensure remediation plans are agreed. Strong cross-functional collaboration and communication are essential.

Formación

• Extensive experience in risk management, compliance monitoring, and auditing within IT outsourcing/service delivery.
• Strong knowledge of IT risk and control frameworks across IT and non-IT domains.
• Hands-on experience with certifications such as CISA, CISSP, CISM, CRISC, ISO 27001.

Responsabilidades

• Manage end-to-end Compliance, Information Security, and Customer Data Protection programs in an outsourcing environment.
• Conduct risk assessments, compliance audits, and gap analyses to identify vulnerabilities and recommend remediation.
• Lead development and enforcement of Risk & Compliance programs, procedures, and standards.
• Engage with business leadership through governance meetings to provide risk insights and ensure remediation plans are agreed upon.
• Coordinate with IT, Physical Security, HR and other functions for risk mitigation.
• Maintain risk registers and R&C calendars for engagements.
• Review and improve security and compliance control frameworks.
• Ensure adherence to regulatory and contractual requirements (e.g., ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA).

Conocimientos

Risk management

Compliance monitoring

Auditing

Stakeholder management

Communication

Analytical skills

Educación

CISA, CISSP, CISM, CRISC, ISO 27001

Descripción del empleo

Role & responsibilities

• Manage end-to-end Compliance, Information Security, and Customer Data Protection programs in an outsourcing environment.
• Conduct risk assessments, compliance audits, and gap analyses to identify vulnerabilities and recommend remediation.
• Lead development and enforcement of Risk & Compliance programs, procedures, and standards.
• Engage with business leadership through regular governance meetings to provide risk insights and ensure remediation plans are agreed upon.
• Coordinate with support functions (IT, Physical Security, HR, etc.) for risk mitigation.
• Maintain risk registers and R&C calendars for engagements.
• Review and improve security and compliance control frameworks.
• Ensure adherence to regulatory and contractual requirements (e.g., ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA).

Preferred candidate profile

• Extensive experience in risk management, compliance monitoring, and auditing within IT outsourcing/service delivery.
• Strong knowledge of control frameworks for IT and non-IT domains.
• Hands-on experience with compliance programs such as ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA.
• Proven ability to lead small teams and manage cross-functional stakeholders.
• Excellent communication and analytical skills.

Qualifications

• 15+ relevant years of experience in Information Risk Management / Information Security
• Certifications: CISA, CISSP, CISM, CRISC, ISO 27001
• Strong communication, analytical, and leadership skills