Head Of Audit and Data Privacy - GRC

About this role

• Ensure strong governance on the complete audit lifecycle performed by various control functions.
• Ensure that the account level contractual obligations of Wipro along with any regulatory requirements are met to ensure adherence to SOW and MSA.
• Ensure that all new and existing applications are compliant to GDPR requirements.
• Management of EU Workers Council related engagements, Sox ITGC Audit, ITDR program, Policy Governance, DSAR, ERM Audits, Customer Audits, Internal Audits, CISO audits.
• Working with various control functions to ensure all identified risks are tracked and mitigated.
• Working with the technology leaders to identify the control gaps.
• Work as a SME for risk and controls applicable to the operations performed by the function.
• Maintain strong working relationship with the stakeholders.
• Review and fine tune the policies and processes as per the industry best practices.
• Tracking of all identified risks by various control function and ensuring closure of the risks within the defined timelines.
• Prepare and maintain risk heat map and risk registers.
• Timely submission of reports, evidence, data for various internal and external audits.
• Perform analytics and prepare meaningful dashboards, reports and presentation as per the defined frequency.
• Build the team and mentor the team members.
  
  

• Functional Competencies/ Skill
• Domain/Industry Knowledge (Expert) -
• Solid experience in identification of risks and evaluation of controls.
• Experience in IT Governance
• Should have managed enterprise level IT audits and SOX audits for a large organization of similar size as Wipro or BFSI industry.
• Should have knowledge of various leading standards/frameworks such as COBIT, ITIL, COSO, PCI-DSS/DSA, NIST etc.
• Expert level understanding of GDPR guidelines.
• Systems Thinking (Competent) -
• Understanding of the Wipro system (interrelatedness, interdependencies and boundaries) and perform problem solving in this complex system.
• Proficient in preparing various dashboards, reports and presentation for executive management.
• Leveraging Technology (Competent)-
• Knowledge of current and upcoming technology (automation, tools and systems) to build efficiencies and effectiveness in own function.
• Experience in various tools, technology platforms, processes such as PIM, PAM, network and security devices, Microsoft Azure, GCP, AD, ITIL processes.

• Excellent executive level communication skills.
• Maintain strong working relationship with the team members and should be able to motivate the team members to achieve the goals and objective of the function.
• Decision maker with strong analytical skills.
• CA or B.E in Computer Science/Information Technology or equivalent qualification.
• Industry recognized certification in information security such as CISSP, CISM, CISA etc.
• Overall, 12-15 years of experience in IT risks & controls management and governance pillars.