Job Description
Hexaware Technologies is seeking experienced professionals for multiple openings in ISMS Compliance and Audits across different levels. This role involves managing external audits, ensuring compliance with global security standards, and collaborating with internal teams to maintain robust security practices.
Responsibilities:
- Ensure compliance with ISMS frameworks and standards
- Work with external auditors to align organizational controls with SOC 1, SOC 2, HITRUST, and ISAE 3000 requirements
- Collaborate with internal stakeholders to gather and validate audit evidence
- Identify and report information security risks revealed through audits
- Communicate security risks and mitigations effectively to leadership
- Review and assist with CAPA processes; follow up on closure of NCs within SLA timelines
- Draft audit reports and related documents with clarity and precision
- Support business process/system audits (BPS) where applicable
Job Requirements
• Strong understanding of ISMS, SOC 1 Type 1, SOC 2 Type 2, HITRUST, and ISAE 3000 controls
• Experience in coordinating with auditors and internal teams during compliance assessments
• Ability to analyze and articulate security risks and their business impact
• Knowledge of CAPA and audit closure processes
• Excellent English communication and report drafting skills
Preferred Qualifications
• CISA and/or ISO 27001 Lead Auditor certification
• Foundational knowledge of business continuity and data privacy practices
• Prior experience conducting business process/system audits
• To Apply: Please send your resume clearly mentioning the position you’re applying for. You may apply for multiple positions.
About the Company
Hexaware Technologies is a globally trusted IT and business process services company. We are focused on delivering secure, scalable, and compliant solutions to our clients. Our information security team plays a pivotal role in safeguarding data and maintaining regulatory excellence. Join us and help shape a more secure digital future.