TOOLS CONSULTANT L1

Wipro; Maharashtra; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Wipro is seeking an experienced GRC professional to engage stakeholders across Engineering, Service Owners, and senior governance bodies. You will maintain awareness of control design, implementation and operation, provide robust challenge to deviations, and drive remediation to completion.

The role emphasizes governance for Privileged Access Management, Vulnerability Management, MI reporting, and alignment with Issues Management policies.

Qualifications

• 7–10+ years of Governance, Risk and Compliance (GRC) experience.
• Strong stakeholder management and communication skills; able to produce executive-level reports.
• Experience with GRC tooling is preferred but not required.

Responsibilities

• Engage key stakeholders to maintain awareness of control compliance across design, implementation and operation.
• Provide robust challenge to deviations and drive remediation to completion.
• Lead governance processes for Privileged Access Management and Vulnerability Management.
• Aggregate, refine, publish and maintain management information for controls.
• Provide MI reporting into governance forums at service line level and to ManCo.
• Proactively identify issues in control design and operation and raise them.
• Align to HSBC Issues Management policies and deliver the Service Line Issues Management process as a 1st Line of Defence.
• Collaborate with DevOps, SRE and Operations for consistent control implementation.
• Balance speed to market with confidentiality, integrity and availability requirements.
• Support evidence management for reviews/audits and advise stakeholders to provide appropriately scoped evidence.
• Operate in a fast-paced environment, manage priorities, drive actions to closure.
• Foster positive team dynamics and accountability.

Skills

GRC experience

Stakeholder management

Executive reporting

Audits & compliance

Tools

ServiceNow

Confluence

Jira

Job description

• Engage key stakeholders (Engineering, Service Owners, ManCo and ExCo) to maintain awareness of control compliance across control design, implementation and operation. Provide robust challenge where deviations are identified (via proactive and/or reactive monitoring), and initiate and track remediation actions through to completion.
• Maintain awareness of HSBC technology and data controls, including control design, implementation and operation requirements, and stay informed of when and how those controls change.
• Lead governance processes for Privileged Access Management and Vulnerability Management, including establishing and running forums, logging decisions, and managing actions to closure.
• Aggregate, refine, publish and maintain effective management information (MI) for controls assigned by the Head of Technology Risk & Control.
• Provide reporting into governance forums at Service Line level (including Sub-Value Streams) and to ManCo.
• Proactively identify issues in control design, implementation and operation through reviews and read-across activities, and raise issues where identified.
• Align to HSBC Issues Management policies and be responsible for delivery of the Service Line Issues Management process as a 1st Line of Defence role, including stakeholder engagement across Cybersecurity, Compliance, Federated and Group Controls, Enterprise Risk Management and (where required) Audit, and ensuring quality and hygiene requirements are met.
• Maintain awareness of upcoming and ongoing reviews/audits, and work with stakeholders to ensure evidence aligns to requests; provide robust challenge where issues arise.
• Collaborate across DevOps, SRE and Operations to ensure consistent control implementation and operation.
• Provide guidance and support, where required, to balance speed to market with confidentiality, integrity and availability requirements.
• Foster positive team dynamics, collaboration, and a culture of transparency and accountability.
• Support evidence management for reviews/audits, including advising stakeholders to provide appropriately scoped evidence that answers the request without oversharing, challenging reviewers/auditors on findings or observations where appropriate, and managing evidence provision when Technology Risk & Control is directly reviewed/audited.
• Operate effectively in a fast-paced environment, managing competing priorities, driving actions to closure, and influencing outcomes across teams without direct authority.

Required Qualifications

• 7–10+ years’ experience in Governance, Risk and Control (GRC), ideally within banking or financial services.
• Strong stakeholder management, written and verbal communication skills, with experience producing executive-level reporting.
• Experience using ServiceNow, Confluence and Jira for workflow/action tracking and documentation; experience with GRC tooling is preferred but not required