Envalior Looking for IT Risk and Compliance Officer (Pune, India) at Pune, Maharashtra, India Full Time

Established in 2023, but with a combined heritage of over 100 years, Envalior is entering the market as a leading global engineering materials powerhouse offering novel and innovative solutions to today’s world. Envalior brings together two highly complementary established players in DSM Engineering Materials and LANXESS High Performance Materials.

We offer a uniquely positioned portfolio of longstanding material, application, and design expertise, creating real and meaningful value for our customers and the greater global society. To grow this leading global engineering materials company, we hire new colleagues to strengthen the foundation for the new organization. This is the perfect time to influence change, challenge the status quo, be part of something new and exciting, craft, create and develop the best in ALL WORLDS and be part of something truly innovative, inspirational and transformational.

Do you want to be part of this exciting journey ahead? Do you love working in an international, highly energized, and collaborative team? Maybe it’s you we are looking for in our global IT team, as our new IT Risk and Compliance Officer.

Your Role

As an IT Risk and Compliance Officer you are responsible for the development of and maintenance of an IT risk framework based on ISO31000 which ensures that the company has a structured approach to identifying, accessing, and managing risks that reduces the vulnerabilities. You will also ensure the compliance with various audits and regulatory frameworks like IATF, NIS2, ISO27001 and TISAX.

Key Responsibilities

IT Risk:

• Develop and maintain the IT Risk framework and process (based on ISO31000) in line with Envalior’s corporate risk management framework, and integrated in the existing business & IT processes.
• Execute/steer/coach, support & oversee the IT project & application infosec- & cybersecurity assessments (business impact assessments) and related outcomes (compliance).
• Introduce train-the-trainer principles to execute BIA’s.
• Maintain the IT Risk register.
• You will follow up on the implementation status of agreed controls.
• Writing up findings, both at high-level (executive summary) and technical level (architects/engineers/developers), including providing mitigation scenarios.
• Develop IT Risk management dashboard and regular reporting to CISO.
• Liaise with the Cybersecurity Architect and Information Security Officer to suggest (architectural / process / policy) optimizations.
• Establishing close cooperation with the Corporate Risk function to exchange IT risk, audit findings and compliance breaches.

IT Compliance

• Develop an IT compliance framework and process, in line with legal requirements, corporate internal audit or strategic IT objectives.
• Assure compliance towards audits (IATF, customers), regulatory (NIS2) and industry frameworks (ISO27001, TISAX).
• Develop and maintain 3rd party cybersecurity / IT supply chain assessments.
• Develop IT compliance dashboard.
• Administratively following up on open (internal/external) IT audit recommendations.
• Setting up monthly reporting on findings and compliance status to senior management.
• Assess the actual maturity level of Envalior on cyber- & information security using existing frameworks or industry best practices.

Requirements

• A bachelor’s degree in IT related field or equivalent experience.
• Minimum 5 to 10 years of work experience in IT Risk and Compliance field, preferably in a manufacturing set up.
• An intelligent, communicative, and analytical person who has an eye for detail.
• Someone who can persevere to get statuses from various stakeholders at regular intervals.
• High level of listening, persuasion and initiative taking competencies
• Proven experience in problem analysis and conflict management
• Extensive practical experience in setting up a compliance framework and executing IT risk assessments.
• Knowledge of security architectures and controls.
• Certifications such as CISSP, CISM or CISA are a plus.
• Proven knowledge of ISO2700x, ISO31000, COBIT5, ITIL are a plus.
• Strong communication skills in English both in speaking and writing.

Benefits

Compensation: We offer competitive compensation packages, inclusive of a global bonus program and an individual performance bonus program.

Comprehensive Benefits: We provide a variety of benefits to support your financial security, health and wellbeing including retirement plans, health programs, life insurance and medical care.

Work-Life & Flexibility: We support you in maintaining a balance between working hours and personal life. With our global “Xwork” program, we offer flexible working arrangements in all countries in which we operate.

Training & Development: We are committed to your professional and personal development and encourage you in the ongoing pursuit of education, training and knowledge through both formal and informal learning.

Diversity: For us, talent matters, we welcome everyone who commits to our values. We strongly believe that including diverse perspectives makes us more innovative and enhances our competitiveness. Therefore, we embrace the uniqueness of every single individual and are truly committed to supporting our people in developing their individual potential.

Interested in this position? Please apply on-line by sending us your CV & Motivation letter in English via the career portal or contact the recruiter directly [email protected] or [email protected]. Reference check procedures are part of the ENVALIOR Recruitment & Selection Process and will be contacted when these references checks are required.

Envalior is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

If you need assistance or an accommodation due to a disability, you may contact us at [email protected]