Job description:

" Point of contact for client stakeholders as well as HCL Operations team for guidance & support regarding compliance control requirements and implementation into service operations
Create & Document the control compliance plans for all services in scope
Lead Compliance processes for large Pharmaceutical Client for specific geography
Manages the infrastructure Qualification of hardware/Servers.
Maintains categorization of Off-the-shelf validation categories.
Ensure that the operations run-books & SOPs are inline & map with Policies, Standards, and Guidelines relating to security, privacy, and confidentiality for the Client IT Environment. Development of Security plan & ensuring adherence for all security domains relevant for in-scope services
Develop & Plan internal audit calendar aligned to client s internal as well as external audit schedule
Execute Security audits as per the agreed upon plan with client stakeholders and work with operations teams for remediation of any gaps and non-compliances
Provide agreed upon and ad-hoc reports for audits & compliance operations.
Facilitate in-time evidence provisioning to client audit, risk & compliance teams at time of external audits
Conduct process audits for ITSM as per agreed upon process controls
Participate in client meetings and committees that investigate compliance needs and develop new and modified Policies, Standards, and Guidelines"

• To clearly understand the client's cybersecurity environment and respective product.
• To monitor, configure, and troubleshoot cybersecurity issues and related monitoring tools
• To analyse and validate cybersecurity incidents in-detail and help the L3 team with RCAordata or logs collection
• To enable knowledge transferortrainings through creationor maintenance of configuration documents, test plans, operational manuals and provide operational training to L1 team.
• To analyse and fine-tune cybersecurity policies, participate in cybersecurity review calls pertaining to change requests and recommendations on cybersecurity policy changes.
• To implement changes, monitor security device performance and implements performance tuning when necessary.
• To prepare analyses and reports to highlight the project progressorchallenges and ensure quality and accuracy to the client