Top IT Jobs in Kolkata

Designs and maintains the company’s Information Security Management System, conducts cyber, privacy, threat, and vulnerability assessments, manages incidents, documents security policies, completes customer security questionnaires, and supports compliance certifications including ISO 27001, SOC 2, and GDPR.

Drive the IT compliance and SOX program across ITGCs and ITACs, including control design, effectiveness testing, audits, documentation, risk assessment, and remediation. Oversee access, change management, computer operations, cloud configuration, automated controls, and financial-reporting systems. Partner with Engineering, Product, Security, Finance, auditors, and control owners to automate evidence collection, implement continuous monitoring, sustain SDLC controls, and guide responsible AI adoption.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Lead IT risk assessments, evaluate and document inherent and residual risks, partner with stakeholders to develop and monitor risk response plans, support enterprise IT risk and cyber security initiatives, maintain risk management procedures and best practices, and communicate risks across ITS and business units.