Aditya Birla - Manager - Compliance & Process Manager

Introduction:

A US $40 billion corporation, the Aditya Birla Group is in the League of Fortune 500. It is anchored by an extraordinary force of over 136,000 employees belonging to 42 different nationalities. The Group operates in 36 countries.

This position is in our Group Information Technology (Group IT) team, which works closely with businesses, corporate functions and partners, providing strategic direction and thought leadership to the Group's IT initiatives. It is responsible for formulating and administering IT policies covering standards, information risk management and governance.

Group IT has deep roots in each of our businesses - thanks to the bias for driving business value from world-class technology and above all the quality of our people. IT has underpinned our Group's business growth trajectory and will continue to - while seamlessly integrating innovation and transformation agenda.

Group IT manages the Centre of Excellence and Global Shared Help Desk for supporting enterprise-wide business applications including SAP, PeopleSoft, Hyperion, Business Intelligence and Corporate Performance Management practices. It engages with business transformation projects in deploying enterprise architecture, best practices and platforms like Cloud, Mobility, Analytics and Social Media

Responsibilities:

Develop & deployment of Compliance Policy:

- To coordinate the development of Group’s information security policies, procedures and standards.

- To work with Key IT security officers, data custodians and governance teams in the deployment of such policies in respective businesses.

- To ensure group policies support compliance with external requirements such as regulatory compliance etc.

- To oversee the dissemination of group policies, standards & procedures to the user community as well as infrastructure services and setup.

- To maintain & assess the latest updated knowledge of applicable regulatory and compliance issues related to Information Security against existing setup to identify the gaps.

- To be a Corporate advocate for infrastructure information security, protection & compliance with privacy and other applicable regulations

Compliance Program Management:

- To design, develop, deploy and oversee an enterprise-wide Information Security Program consistent with applicable regulatory and compliance requirements.

- To develop and communicate policies to direct security functions relative to information technology systems, networks, applications, and voice and data communications that are consistent with current regulatory and Compliance requirements.

- To assess the impact of policies implemented on security infrastructure and derive more from my current security setup

- To develop business-relevant metrics to measure the efficiency and effectiveness of the program, facilitate appropriate resource allocation and increase the maturity of the security program.

Compliance & enforcement account manager:

- To Co-ordinate deployment of the Service Delivery & security processes in all areas of Infrastructure operations and projects.

- To plan periodic data center, security operations and network audit to explore vulnerabilities and threats and ensure to fill the gaps of the audit in all above domain in time & Full.

- To be accountable for implementation, audit of policies & procedures based on ITIL, ISO 20000 and ISO 27001 framework.

- To develop and implement an incident reporting and response system to address security breaches, respond to alleged policy violations or complaints from external parties.

- To serve as official contact point information security, privacy and infringements incidents including relationship with law enforcement entities.

- To keep abreast of latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities pertaining to ABG and its infrastructure.

Infrastructure Readiness for Business Continuity:

- To develop and assess an ongoing risk assessment program targeting risk assessment & potential business impact of a business disruption

- To design, development, and documentation of business unit continuity plan

- To develop and establish Disaster Recovery

Procedures for network operations & supporting services