Job Summary

Responsible for strengthening IT governance, risk management, compliance, and privacy maturity across the HCL IT environment.

The role ensures consistent adherence to HCL-defined policies, procedures, and control frameworks while supporting multiple internal IT reviews, assessments, and audits across global standards and regulatory requirements.

This position provides leadership with deep, cross-functional compliance expertise to plan, coordinate, and execute multi-framework audits and assessments, including ISO 27001, 27701, 22301, 20000-1, 9001, SOC 1, SOC 2, PCI DSS, and enterprise-wide risk and privacy assessments. The role ensures compliance with global data protection and privacy regulations, including but not limited to India’s Digital Personal Data Protection (DPDP) Act, EU GDPR, UK GDPR, CCPA/CPRA, HIPAA Privacy Rule, LGPD (Brazil), and other applicable regional privacy and data protection laws.

The role involves both individual deliverables and coaching teams, coordinating with multiple IT towers, validating audit and privacy evidence, managing regulatory and operational risks, and driving corrective actions to closure. It serves as key point of accountability for audit readiness, privacy compliance, regulatory reporting, and RFI/RFP responses, while ensuring service delivery within agreed SLAs and budgeted cost parameters.

Key Responsibilities

Audit, Compliance and Governance:

• Plan, prioritize, and manage internal IT reviews, assessments, and audits, including but not limited to ISO 27001, 27701, 22301, 20000-1, SOC 1, SOC 2, PCI DSS, risk assessments, and privacy assessments.
• Ensure effective implementation and monitoring of IT controls in line with HCL policies, procedures, and governance requirements.
• Harmonize controls across multiple standards, frameworks, and regulatory requirements to drive consistency and maturity.

Audit & Assessment Management

• Coordinate, communicate, and liaise with multiple IT teams to support audit and assessment activities.
• Collect, document, review, and validate IT documentation, records, and artifacts using HCL-approved tools and repositories.
• Validate evidence against HCL policies and procedures prior to submission to auditors and assessors.
• Identify, document, and communicate audit findings or non-conformities to relevant IT stakeholders.
• Track corrective and preventive actions to closure and provide periodic status reporting.

Leadership & Operations

• Lead, guide, and coach team members to ensure process effectiveness and continual service improvement.
• Manage service delivery operations to meet agreed SLAs while controlling costs within budgeted levels.
• Proactively identify and manage IT and compliance risks; escalate issues appropriately to senior management.
• Act as the single point of accountability for responding to RFI/RFP queries, ensuring strict adherence to organizational policies, compliance requirements, and approved processes.
• Provide accurate, transparent, and timely reporting to leadership on audit status, risks, and remediation progress.

Skill Requirements

Certifications (Mandatory)

• ITIL v3 or ITIL 4 certification.
• ISO 27001 Lead Auditor certification.
• At least one technical certification such as CCNA, MCSE, Network+, or Security+.
• At least one risk, audit, or security certification such as CISA, CISM, CRISC, CISSP, or COBIT.

Other Requirements

Behavioral Competencies

• Strong analytical and problem-solving skills.
• High attention to detail and accuracy.
• Ability to manage ambiguity and competing priorities.
• Proactive, results-oriented, and capable of influencing without authority.
• Proven Solution mindset and having strong competence working with diverse culture virtual teams.