Cybersecurity - IT Policy/governance Regional Manager

Description

Key Quantitative Measures/Data:

The Cyber Security Governance Manager is expected to perform the following functions:

• Identify improvement opportunities in existing policies and processes based on learnings and inputs from past audits and assessments, risk registers (enterprise & functional), applicable standards, regulatory & compliance requirements and relevant industry best practices
• Demonstrate advanced knowledge by embedding security controls and risk treatment actions, in ways of working (enable security by design for all operational processes and procedures)
• Lead in the development/adoption and enforcement of the policy and process improvement program and take necessary actions (policy and process fine tuning, fix up the broken processes, play program manager role) to make the program successful
• Establish key performance indicators and define ownership for each policy
• Establish relationship with implementation teams. Provide direction, guidance and awareness
• Providing updates (written reports) to line manager
• Suggest changes to relevant information security policies, procedures for improvement, ensuring that these are compliant with HCL/Customer Information Security policies and applicable regulation (demonstrate expertise in designing practical and sustainable procedural controls)
• Partner with required teams (Global Information Technology, Risk & Compliance and other internal stakeholder)
• Conduct regular review meetings with required teams to provide insight of gaps, risks and compliance posture in the specific business areas, provide recommendations and act/escalate, where necessary, in response to non-compliances and identified risks/gaps. 

SOX Compliance, Internal Audit, Itgc, Patch Management, ISO 2700, 1IT Policy Design, IT Security Policy Review, IT Control Framewor ISMS Framework, Vulnerability Management,security incident managementS, OX