KEY RESPONSIBILITIES &

- Client interface for understanding the IT Governance, IT Risk & Compliance Management Controls as applicable to Infrastructure operations. Responsible and accountable for driving and maintaining the Compliance Program Which Includes:

I. Defining and implementing controls as per Customer defined Security and Privacy policies II. Ensuring measurement and compliance to the policies.

III. Drives Internal and External Audits

IV. Participate and advise on Security Incident Investigation

V. Training and awareness of Employees on Security Policies

- Well versed and hands-on experience for establishing processes, controls and audits of compliances like SOX, ITGC testing, ISO/IEC 27001:2022, and other security and privacy frameworks
- Documentation of IT & risk management Controls as they are currently being executed in client setting and ensuring that the same controls are followed and implemented in HCL service delivery operations
- Work with the client & HCL technical teams for change request on any risk or control implementation as well as governance process
- Participate in internal as well as external regulatory audits as well as IT security audits.
- Understand IT Risks and define audit & governance mechanisms for assets, processes & physical security
- Point of contact for the client compliance & IT audit team for provisioning audit evidences within the SLAs defined.




- Provide strategic guidance & consulting support on implementation of IT controls for Networks, Operating Systems, System Security, Backup & Recovery, Storage, BCP/DR
- Work with the client & HCL team in identifying any process/ control gaps and suggesting the remediation plan& tracking the plan progress till closure.
- Liaison with Audit Firms and Client for all types of internal and External audits.

- Skills
- Hands-on experience in implementation and audits of:

ISO 27001 SOX, SOC1, SOC 2

ITGC

- Excellent understand & experience in IT infrastructure management which includes Networks, Data Centre Operations, Service Management/Service Desk, Server Management from Security Controls prospective.
- Understanding of IT Service Management processes. ITIL V3.0 certified.
- Should have been into roles of IT Auditor/ Governance Role and should have executed at least 4-5 audit lifecycle starting from Audit planning to Reporting
- Should be able to identify, implement and report compliance related to Security Controls design & operational effectiveness gaps
- Candidate necessarily need to have client facing experience.
- Good Project & Program Management
- Excellent written and verbal communications skills
- Should be able to travel on short as well as long term engagements

📌 GRC Lead/IT Governance,Risk and compliance Lead/12-18Years (Bengaluru)
🏢 Hirexa Solutions
📍 Bengaluru