Manager/Sr. Manager - Infosec Audit & Compliance

EXL; Dadri; On-site; INR 600,000 - 1,100,000; Full time

Job summary

EXL in India seeks an InfoSec Audit Assurance professional focused on First Line Compliance. You will support policy and process reviews aligned with cybersecurity standards and assess technology capabilities across on‑prem and cloud environments.

Council on reporting and dashboards, KPIs, and management information will be part of your routine, with collaboration across global EXL teams and clients.

Qualifications

• Understanding of Information Security and Compliance frameworks.
• Knowledge of risk management and control testing.
• Familiarity with current security tools and best practices.
• Ability to document and explain technical topics clearly.

Responsibilities

• Audit assurance and First Line compliance for InfoSec.
• Review policy and process servers in line with cyber security standards.
• Assess cyber technology capabilities and tool effectiveness.
• Provide security assurance for on‑premises and cloud applications.
• Prepare dashboards, KPIs, and management reports.
• Coordinate reporting with internal/external stakeholders.
• Communicate findings across EXL and client teams.

Skills

Information Security

Compliance

Risk Frameworks

Security Tools & Techniques

Networking Basics

Documentation & Reporting

Communication

Auditing Standards

Job description

• Activities pertaining to InfoSec – Audit Assurance- First Line Compliance (including but not limited to):
• Regular reviews of Policy, Process reviews basis cyber security best practices & standards
• Pro-active regular assessment of cyber technology capabilities (including tools & technologies)
• Security assurance on new and existing applications (On prem applications and Cloud – SaaS, PaaS etc.)
• Prepare and publish regular dashboards, management assurance reports, KPIs, automations and simplification of processes
• Managing internal and external reporting as well as various functional dashboards
• Stakeholder management to ensure timely availability of required inputs
• Tracking and reporting of sub functional planned activities to higher management

Technical Skills:

• Good understanding of Information Security and Compliance, Risk Frameworks
• Knowledge of current best practice management tools and techniques
• Basic knowledge of Networking, Systems, Voice and business applications
• An industry recognized certification like LA27001, CEH, CISSP, PCIDSS, CISA / CISM is an added advantage

Process Specific Skills:

• Strong domain understanding of IT outsourced business model
• Capable of managing project tasks individually and as a team
• Ability to document and explain technical details in a concise & understandable manner
• Ability to interface and communicate at all levels within EXL and Client organizations
• Understanding of Enterprise Business Processes, IT Process, Compliance frameworks is vital
• Knowledge of auditing standards
• Good presentation and interpersonal skills.
• Excellent problem-solving skills in a cross functional environment
• Strong verbal and written communication skills
• Strong customer service orientation ability to connect with global customers and work with Global teams