Manager / Sr. Manager - Infosec Audit & Compliance

Primary Responsibilities :

Activities pertaining to InfoSec – Audit Assurance- First Line Compliance (including but not limited to) :

Regular reviews of Policy, Process reviews basis cyber security best practices & standards

Pro-active regular assessment of cyber technology capabilities (including tools & technologies)

Security assurance on new and existing applications (On prem applications and Cloud – SaaS, PaaS etc.)

Prepare and publish regular dashboards, management assurance reports, KPIs, automations and simplification of processes

Managing internal and external reporting as well as various functional dashboards

Stakeholder management to ensure timely availability of required inputs

Tracking and reporting of sub functional planned activities to higher management

Technical Skills :

Good understanding of Information Security and Compliance, Risk Frameworks

Knowledge of current best practice management tools and techniques

Strong stakeholder management skills

Basic knowledge of Networking, Systems, Voice and business applications

An industry recognized certification like LA27001, CEH, CISSP, PCIDSS, CISA / CISM is an added advantage

Process Specific Skills :

Strong domain understanding of IT outsourced business model

Capable of managing project tasks individually and as a team

Ability to document and explain technical details in a concise & understandable manner

Ability to interface and communicate at all levels within EXL and Client organizations

Understanding of Enterprise Business Processes, IT Process, Compliance frameworks is vital

Knowledge of auditing standards

Soft skills :

Good presentation and interpersonal skills.

Excellent problem-solving skills in a cross functional environment

Strong verbal and written communication skills

Strong customer service orientation ability to connect with global customers and work with Global teams

Good listening and consultative skills