Lead Compliance and Governance

Key Responsibilities:

• Perform GRC Controls Attestations for network-related controls and ensure compliance with Ameriprise Control Framework.
• Manage Archer Exceptions lifecycle for network security risk exceptions, including documentation, approvals, and remediation tracking.
• Oversee Enterprise Vendor Management Requirements (EVMR) compliance for network vendors and third-party providers.
• Monitor and report Risk Events impacting network infrastructure, ensuring timely escalation and resolution.
• Identify, track, and remediate Network Security Problems and InfoSec Vulnerabilities across network platforms.
• Conduct risk assessments and implement security controls aligned with regulatory and industry best practices for network technologies.
• Collaborate with internal stakeholders to maintain accurate documentation for compliance audits and attestations.
• Support audit engagements by coordinating schedules, tracking deliverables, and ensuring successful outcomes.
• Prepare management reports on compliance status, network risk exposure, and remediation progress.
• Drive continuous improvement in network compliance processes and risk management methodologies.

Preferred Key Skills:

• Strong understanding of Governance, Risk & Compliance (GRC) frameworks and tools (e.g., Archer, ServiceNow GRC) with focus on network controls.
• Knowledge of network security, risk assessment methodologies, and vulnerability management.
• Familiarity with vendor risk management processes and regulatory compliance requirements for network services.
• Prior experience in communicating with and presenting to internal and external auditors
• Excellent communication and stakeholder management skills, including ability to engage senior leadership.
• Analytical skills for problem-solving, data interpretation, and risk evaluation.

Qualifications (Mandatory):

• Bachelors degree in Computer Science, Information Security, Information Technology, or equivalent work experience.
• Prior experience in IT Audit, Information Security Governance, or Technology Compliance roles focused on network infrastructure.
• Hands-on experience with Security Risk Exceptions within Archer.
• Prior working experience with GRC Control Management in ServiceNow for network-related controls.
• Exposure to network technologies (routers, switches, firewalls, VPN, AWS Cloud etc.) and associated compliance requirements.
• Understanding of regulatory frameworks and risk reporting standards.

Location: Gurugram/Noida/Hyderabad