Job description:

Details : JD for Business continuity POSITION Business continuity EXPERIENCE >12 YearsKEY RESPONSIBILITIES & JOB DESCRIPTION Client interface for understanding the IT Governance, IT Risk & Compliance Management Controls as applicable to Infrastructure operations. Responsible and accountable for driving and maintaining the Compliance Program Which Includes:I. Defining and implementing controls as per Customer defined Security and Privacy policiesII. Ensuring measurement and compliance to the policies.III. Drives Internal and External Audits IV. Participate and advise on Security Incident InvestigationV. Training and awareness of Employees on Security Policies Well versed and hands-on experience for establishing processes, controls and audits of compliances like SOX, ITGC testing, ISO 27001, and other security and privacy frameworks Documentation of IT & risk management Controls as they are currently being executed in client environment and ensuring that the same controls are followed and implemented in HCL service delivery operations Work with the client & HCL technical teams for change request on any risk or control implementation as well as governance process Participate in internal as well as external regulatory audits as well as IT security audits. Understand IT Risks and define audit & governance mechanisms for assets, processes & physical security Point of contact for the client compliance & IT audit team for provisioning audit evidences within the SLAs defined. Provide strategic guidance & consulting support on implementation of IT controls for Networks, Operating Systems, System Security, Backup & Recovery, Storage, BCP/DR Work with the client & HCL team in identifying any process/ control gaps and suggesting the remediation plan& tracking the plan progress till closure. Liaison with Audit Firms and Client for all types of internal and External audits.SKILLS Hands-on experience in implementation and audits of:ISO 27001SOX, SOC1, SOC 2ITGC Excellent understand & experience in IT infrastructure management which includes Networks, Data Centre Operations, Service Management/Service Desk, Server Management from Security Controls prospective. Understanding of IT Service Management processes. ITIL V3.0 certified. Should have been into roles of IT Auditor/ Governance Role and should have executed atleast 4-5 audit lifecycle starting from Audit planning to Reporting Should be able to identify, implement and report compliance related to Security Controrls design & operational effectiveness gaps Candidate necessarily need to have client facing experience. Good Project & Program Management Excellent written and verbal communications skills Should be able to travel on short as well as long term engagements PLATFORM /TOOL EXPERTISE Not applicableQUALIFICATIONS B.E/B.Tech with MBA preferred. Candidates with following Certifications will be preferred: CISA/CGEIT/CISM/CISSP ISO 27001 Implementer, Lead Auditor GRC Platform Specific Certifications WORK LOCATION Pune

• To clearly understand the client's cybersecurity environment and respective product.
• To monitor, configure, and troubleshoot cybersecurity issues and related monitoring tools
• To analyse and validate cybersecurity incidents in-detail and help the L3 team with RCA/data or logs collection
• To enable knowledge transfer/trainings through creation/ maintenance of configuration documents, test plans, operational manuals and provide operational training to L1 team.
• To analyse and fine-tune cybersecurity policies, participate in cybersecurity review calls pertaining to change requests & recommendations on cybersecurity policy changes.
• To implement changes, monitor secu