IT Compliance and Audit Lead

🌟 We're Hiring for Delivery Compliance Officer - Risk and Compliance in HCLTech

📍 Location: Noida/Chennai/Bengaluru

🎓 Education: BE/B.Tech / BCA/BSc

💼 Experience: 7+ Years

No of position - 9 (Noida -2, Chennai - 4, Bengaluru -3)

Key Responsibilities:

1. Strong understanding of IT control frameworks with expertise in risk assessment and control selection.
2. Hands‑on experience in at least two compliance programs such as PCI DSS, HIPAA, ISO 27001, SOC2, SOX, NIST, FISMA, or COBIT.
3. Leads teams to execute periodic risk assessments and integrates remediation with risk management processes.
4. Partners with delivery leadership to communicate, manage, and mitigate risks to acceptable levels.
5. Enhances compliance awareness across delivery teams and ensures adherence to policies and processes.
6. Oversees measurement and monitoring of compliance with contractual, security, and policy requirements to maintain audit readiness.
7. Leads compliance and audit testing programs, supporting external certifications and internal assessments.
8. Provides effective leadership to small teams, manages junior staff, and guides risk‑mitigation solutions.
9. Collaborates with DCO and Delivery Compliance teams to build world‑class processes, technologies, and continuity/privacy practices.
10. Communicates risks effectively across all levels—including non‑IT teams and C‑suite.

Preferred Qualifications:

• 8-10 relevant years of experience in Information Risk Management / Information Security
• Certifications: ISO 27001 (must have), Preferred CISA, CISSP, CISM, CRISC, CGEIT
• Strong communication, analytical, and leadership skills

Ideal Candidate:

• Information Risk Management & IT Audit
• ISO 27001 Implementation & Governance
• Technical Security Assessments & Control Validation
• Business Continuity & Privacy Compliance
• Strong analytical, communication, and interpersonal skills
• Ability to translate complex security risks for technical and non-technical stakeholders
• Committed to building secure, compliant, and resilient IT environments