Information Security Audit Manager

Position Summary - The position is a member of Risk & Compliance org within HCL Technologies. The DCO will be aligned to critical service delivery engagements and will be responsible for ensuring compliance in accordance to client, organizational & regulatory security requirements.

Key Responsibilities - Perform the following functions :

• Lead and manage the internal assessment program, ensuring effective facilitation of assessments. Oversee the program's execution and conduct control testing aligned with established frameworks and standards, including ISO 27001, ISO 22301, ISO 27701, SOC 1 & SOC 2.
• Maintain and update the enterprise risk register, ensuring accuracy and completeness of risk data, and develop consolidated risk views for reporting and analysis.
• Design and prepare risk dashboards to visualize key metrics and trends, and present comprehensive status reports to senior management as part of the internal risk assessment program
• Perform assessments of the in-scope facilities against relevant standards such as ISO 27001, ISO 22301, SOC.
• Collaborate closely with various stakeholders to support the entire certification lifecycle.
• Engage with relevant stakeholders to manage compliance requirements through awareness initiatives and regular interactions, ensuring users understand and comply with necessary procedures to maintain security.
• Identify gaps and non-compliances, and work with relevant stakeholders to ensure timely resolution
• Promote a risk-aware culture throughout the organization.
• Assist in scoping and develop a calendarized schedule of activities for regular monitoring.
• Adhere to a defined escalation matrix to manage identified risks.
• Coordinate and facilitate to third parties for external audits.
• Stay informed about the latest information security trends and threat landscapes to take proactive measures during assessments.
• Keep management informed of critical issues that may impact customers, suppliers, or the company.
• Introduce efficiencies to enhance existing programs.
• Actively participate in other projects / initiatives as required.

Mandatory knowledge or skills -

Education Qualification - Bachelor’s Degree - BE / B Tech / B.Sc, Master degree in any domain, preferably in Information Technology or Computer Science

Certifications Preferred - Security Certifications like CISA / CRISC / ISO27001

Attributes of Ideal Candidate –

time management skills.