IS Risk and Compliance Manager

Overview

Oversee and monitor IS risk and compliance performance, including IS/IT related regulatory and digital compliance, for the Electrification business area in Bangalore. The role is hybrid.

What you'll do

• Serve as point of contact for IS compliance and risk management, collaborating with other IT functions and EL teams.
• Act as process owner for IS/IT risk management for the Electrification business area.
• Act as primary liaison with group and country stakeholders for IS/IT risk management, guiding the assessment process and supporting effective outcomes.
• Engage with the business to implement a risk-based methodology for identifying and mitigating organizational compliance exposure.
• Ensure implementation of IT and SAP compliance standards, ITGC controls, data privacy controls, and trade compliance controls and processes.
• Ensure full compliance with all regulatory and audit requirements, standards and policies.
• Evaluate compliance before audits or examinations, identify gaps, and define remediation initiatives while managing timely resolution.
• Provide external audit support by preparing IS teams to be audited and participating in the audit or review process.
• Understand data privacy (GDPR) requirements based on ABB guidelines and work with the business on implementation.
• Manage the end-to-end execution (testing and documentation) of the annual ICoFR program for IT controls.
• Develop and review workpapers that support testing conclusions and provide clear, well-documented evidence of control testing.
• Work with the application team to classify export control classification numbers (ECCN).
• Perform risk assessments and implement controls per frameworks for regulations such as data privacy, trade compliance and NIS 2.

What you'll need

• Master's degree in information technology, computer science, software engineering, or a related qualification such as CISSP, CISA, CIA, CISM or CA.
• 15+ years of experience in information security or IT general control compliance environments.
• At least 5–8 years implementing ITGC controls, risk management frameworks, governance, IT risk assessments, and IT audit activities.
• Familiarity with the concept of GDPR and personally identifiable information (PII).
• Understanding of trade compliance requirements.
• Motivated to learn and attentive to new digital regulatory standards.

Details

• Location: Bangalore, Karnataka, India.
• Work mode: hybrid.
• Reports to: EL IS Compliance Leader.