Manager - ARM

Job description

**Role & responsibilities** - Manage end-to-end **Compliance, Information Security, and Customer Data Protection programs** in an outsourcing environment. - Conduct **risk assessments**, compliance audits, and gap analyses to identify vulnerabilities and recommend remediation. - Lead development and enforcement of **Risk & Compliance programs, procedures, and standards**. - Engage with business leadership through regular governance meetings to provide risk insights and ensure remediation plans are agreed upon. - Coordinate with support functions (IT, Physical Security, HR, etc.) for risk mitigation. - Maintain risk registers and R&C calendars for engagements. - Review and improve security and compliance control frameworks. - Ensure adherence to regulatory and contractual requirements (e.g., **ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA**). **Preferred candidate profile** - Extensive experience in **risk management, compliance monitoring, and auditing** within IT outsourcing/service delivery. - Strong knowledge of **control frameworks** for IT and non-IT domains. - Hands-on experience with compliance programs such as **ISO 27001, SOC2, SOX, NIST, PCI-DSS, HIPAA**. - Proven ability to lead small teams and manage cross-functional stakeholders. - Excellent communication and analytical skills. **Qualifications** - 10+ relevant years of experience in **Information Risk Management / Information Security** - Certifications: **CISA, CISSP, CISM, CRISC, ISO 27001** - Strong communication, analytical, and leadership skills