Manager - Captive Operations (Risk & Compliance)

About the Company

Tata Communications pioneers connectivity solutions powered by Cloud, Mobility, IoT, Collaboration, Security, Media, and Network services. Aimed at creating a New World of Communications, the company strives for innovation combined with intelligence.

Organization Details

Organization: Novamesh Ltd (a Tata Communications Ltd entity)
Position Level: L3
Location: Jaipur, Rajasthan
Shift: Monday to Friday, 9 hours per day

Job Description

The role focuses on Risk and Compliance Auditing to ensure the company adheres strictly to internal policies, regulatory requirements, and industry standards. The selected candidate will conduct audits, identify compliance risks, propose improvements, and support corrective initiatives to strengthen the organization's security and compliance framework.

Roles and Responsibilities

• Lead SOC audits including evidence collection, resource scheduling, and coordination with control owners and external auditors daily.
• Evaluate potential risks related to SOC operations to prevent compliance breaches.
• Review programs and activities influenced by industry regulations, including documentation and software tools.
• Advise and implement corrective measures for procedures not meeting compliance requirements.
• Provide awareness, consultation, and guidance to internal stakeholders on SOX controls and risk mitigation amidst evolving environments.
• Engage in project teams ensuring enterprise risks and SOX controls are proactively identified and managed throughout development lifecycle.
• Spot potential audit concerns and suggest operational improvements, especially for SOC 2 audits.
• Maintain knowledge of cybersecurity frameworks such as NIST, COSO, COBIT, ITIL, and understand third-party assurance reports like SOC 1, SOC 2, SOC 3.
• Utilize compliance management software and tools efficiently.

Required Qualifications

• Educational Background: B.E. or B.Tech in Information Technology, Computer Science, or Electronics and Communication Engineering.
• Experience: At least 8 years in risk and audit functions.
• Certifications: Relevant credentials including CISA and ISO 27001.