Tower Lead - Data security and compliance,Presales

Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · IT Support

In short

We are looking for a skilled GRC professional with extensive experience in information security, risk management, and compliance initiatives, particularly with ISO/IEC 27001, NIST Cybersecurity Framework, and SOC audits. The role involves conducting risk assessments, managing compliance, supporting audits, and improving security controls to ensure organizational adherence to standards.

Responsibilities

Support the development, implementation, and maintenance of the organization's GRC program.
Conduct information security risk assessments and ensure identified risks are appropriately tracked and remediated.
Assist in maintaining compliance with ISO 27001 requirements, including support for certification audits and surveillance audits.
Evaluate and assess security controls against NIST frameworks and industry best practices.
Coordinate and support SOC 1 and SOC 2 audits, including evidence collection, control testing, and remediation activities.
Monitor compliance requirements and recommend improvements to policies, standards, and procedures.
Perform gap assessments against regulatory and industry frameworks.
Track remediation activities and collaborate with stakeholders to ensure timely closure of identified findings.
Support third-party/vendor risk assessments and due diligence activities.
Develop compliance reports, risk dashboards, and metrics for management review.
Facilitate internal audits and coordinate with external auditors and certification bodies.
Promote security awareness and governance best practices across the organization.

Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, Risk Management, or a related field.
8+ years of experience in Governance, Risk, and Compliance (GRC), Information Security, Audit, or Risk Management.
Strong knowledge of ISO/IEC 27001 ISMS requirements and controls, NIST Cybersecurity Framework (CSF), NIST SP 800-53 and related NIST standards, SOC 1 and SOC 2 audit frameworks, and risk assessment methodologies and control testing.
Experience in developing and maintaining security policies, standards, and procedures.
Familiarity with compliance management and GRC tools.
Excellent analytical, documentation, and stakeholder management skills.

Desired Qualifications

Professional certifications such as: CISSP, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor.
Experience with cloud security frameworks (Azure, AWS, Google Cloud).
Knowledge of additional compliance frameworks such as PCI DSS, GDPR, HIPAA, or CSA CCM.
Experience supporting enterprise-scale security and compliance programs.

Benefits

At HCLTech, you'll supercharge your potential.
You'll find your career.
And you'll find your spark.
All at a place that knows that helping its customers stay on top starts by putting its people first.

Skills

ISO/IEC 27001NIST Cybersecurity FrameworkNIST 800-seriesSOC 1SOC 2CISSPCISACRISCISO 27001 Lead ImplementerISO 27001 Lead AuditorAzureAWSGoogle CloudPCI DSSGDPRHIPAACSA CCM

#GRC#Data Security#Compliance#Presales

About HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

See all open jobs at HCLTech Read more about HCLTech Website