Experience
14 - 17 yrs
Salary (CTC)
₹16.1L - ₹21L
Job Location
Noida, India
Vacancy
1
Designation
Risk Manager
Job Type
ONSITE
Job Description
Role & responsibilities
- Manage end-to-end Compliance, Information Security, and Customer Data Protection programs in an outsourcing environment.
- Conduct risk assessments, compliance audits, and gap analyses to identify vulnerabilities and recommend remediation.
- Lead development and enforcement of Risk & Compliance programs, procedures, and standards.
- Engage with business leadership through regular governance meetings to provide risk insights and ensure remediation plans are agreed upon.
- Coordinate with support functions (IT, Physical Security, HR, etc.) for risk mitigation.
- Maintain risk registers and R&C calendars for engagements.
- Review and improve security and compliance control frameworks.
- Ensure adherence to regulatory and contractual requirements (e.g., ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA).
Preferred candidate profile
- Extensive experience in risk management, compliance monitoring, and auditing within IT outsourcing/service delivery.
- Strong knowledge of control frameworks for IT and non-IT domains.
- Hands-on experience with compliance programs such as ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA.
- Proven ability to lead small teams and manage cross-functional stakeholders.
- Excellent communication and analytical skills.
Qualifications
- 10+ relevant years of experience in Information Risk Management / Information Security
- Certifications: CISA, CISSP, CISM, CRISC, ISO 27001
- Strong communication, analytical, and leadership skills