{"id":2606537,"url":"https://alion.io/job/anovia-program-manager-security-operations-compliance","title":"Program Manager-Security Operations & Compliance","company":{"id":4416940,"name":"Anovia","domain":"anovia.com","url":"https://alion.io/company/anovia","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":32000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SOC 2","optional":false},{"name":"NIST CSF","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-07T15:29:20Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-16T12:38:03Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Anovia (formerly Innovatia Technical Services) is an industry-leading technology outsourcing support provider with expertise in the telecommunications industry. Operating for over 20 years, we specialize in workflow and knowledge processes, as well as technical support, helpdesk and multilingual support services. With over 200 professional experts across the globe, we service some of the worlds’ most successful Fortune 500 and Fortune 1000 companies.\nAbout the Role\nAnovia is looking for a hands-on information security and compliance professional with practical experience working with ISO/IEC 27001, SOC 2, HIPAA, or similar security and compliance programs.\nThe successful candidate will have experience helping an organization prepare for and work through an audit or certification process, including developing and maintaining policies and controls, supporting evidence collection, coordinating activities and meetings, tracking actions, and working with internal and external auditors.\nThis is also a build and delivery role. Anovia has a number of technical and operational initiatives that require more structure, planning, coordination, and follow-through. The successful candidate will be comfortable taking an initiative that is not yet well defined, establishing a practical plan, coordinating the people involved, and driving the work through to completion. Examples could include implementing a new security tool, improving security monitoring or vulnerability management, or helping establish a NOC/SOC capability.\nResponsibilities\nMaintain and continue to develop Anovia's ISO/IEC 27001 Information Security Management System (ISMS), including policies, procedures, controls, risks, objectives, evidence, and ongoing improvement activities.\nSupport ISO 27001, SOC 2, HIPAA, and other security and compliance initiatives as they are introduced and developed.\nCoordinate internal and external audit activities, including preparing evidence, scheduling and facilitating meetings, maintaining action items, and ensuring audit findings and resulting actions are addressed.\nMaintain the information asset inventory and data classification program, including assigning and tracking ownership.\nSupport identity and access management activities, including provisioning and de-provisioning, access reviews, least-privilege requirements, and privileged access controls.\nMonitor and improve security tooling and processes, including Microsoft 365 security capabilities, Microsoft Defender, Intune, Entra ID, security monitoring, endpoint protection, and vulnerability management.\nCoordinate vulnerability identification, remediation tracking, and escalation of significant findings.\nCoordinate third-party and vendor security assessments, including security questionnaires and contract review support.\nDevelop, maintain, and support adoption of information security policies, standards, and operating procedures.\nCoordinate security awareness training and phishing simulation programs.\nSupport security incident response activities, including detection, containment, investigation, root-cause analysis, and post-incident reporting.\nSupport business continuity and disaster recovery activities, including maintenance of recovery requirements, testing, and related evidence.\nLead or coordinate technical and operational initiatives from initial scope through implementation, establishing plans, identifying dependencies and owners, coordinating stakeholders, tracking risks and issues, and driving work to completion.\nServe as a primary point of contact for internal and external auditors and coordinate responses with relevant business and technical stakeholders.\nRequired Qualifications\n4+ years of progressively responsible experience in information security, IT compliance, GRC, security operations, or a related field.\nPractical experience working with ISO/IEC 27001, SOC 2, or a comparable security and compliance framework. Experience should include meaningful participation in an audit or certification process and familiarity with activities such as policy development, control implementation, evidence collection, audit preparation, management meetings, action tracking, and remediation.\nExperience with GRC processes and tools, including risk and control management, evidence collection, compliance tracking, audit preparation, and remediation or corrective-action management.\nWorking experience with the Microsoft 365 security environment, including familiarity with Microsoft Defender, Intune, Entra ID, and related security and compliance capabilities.\nDemonstrated ability to take an ambiguous technical or operational initiative and bring structure to it, including defining scope, developing a practical plan, coordinating stakeholders, managing dependencies and issues, and driving the work through to completion.\nWorking knowledge of information security principles, risk management, access control, vulnerability management, incident response, and security awareness.\nComfortable working directly with auditors, technical teams, business stakeholders, vendors, and leadership.\nStrong organizational and communication skills, with the ability to manage multiple ongoing activities and follow through on commitments.\nBachelor's degree in Information Security, Computer Science, IT, or a related field, or equivalent practical experience.\nNice to Have\nExperience with HIPAA Security and Privacy Rule requirements or other healthcare security and privacy requirements.\nExperience with GRC platforms such as Secureframe, Vanta, Drata, or OneTrust.\nExperience with SIEM, EDR/endpoint protection, vulnerability scanners, or related security tooling beyond the Microsoft 365 environment.\nExperience with NIST CSF or other complementary security frameworks.\nExperience managing contractors or vendors during technical or security initiatives.\nExperience helping establish or improve security monitoring, NOC, SOC, or similar operational capabilities.\nExperience with business continuity and disaster recovery planning.\nCertifications\nCertifications are useful supporting evidence of knowledge, but are not a substitute for practical experience. Relevant certifications include:\nISO/IEC 27001 Lead Implementer or Lead Auditor\nCISA (Certified Information Systems Auditor)\nCISSP (Certified Information Systems Security Professional)\nCISM (Certified Information Security Manager)\nRelevant certifications are preferred but not require\nBenefits at Anovia\nComprehensive Health Insurance policy\nEmployee Wellness Program with focus on mental health\nRobust reward and recognition programs\nCompany incentive programs offered\nAttractive leave policy: Holiday Leave, Maternity Leave, Paternity Leave, Birthday leave, Bereavement Leave and Paid Leave for personal time off\nAmple growth and learning opportunities\nRemote work opportunities\nFocus on work/life balance\nImmigration Program supporting immigration to Canada for eligible employees\nWe thank all candidates for their interest, however, only those selected for an interview will be contacted.\nAnovia is an equal opportunity employer.","description_format":"text","description_chars":7095,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T09:53:12Z"}],"visa":[],"liveness":{"score":92,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.919,"p_room":1,"age_days":8,"expected_fill_days":42,"reasons":["conf:2","urgency","win:early"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/anovia-program-manager-security-operations-compliance","json_url":"https://alion.io/job/anovia-program-manager-security-operations-compliance.json","meta":{"generated_at":"2026-10-16T15:02:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14792,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4416940},"rest":"https://alion.io/mcp/rest/get_company?id=4416940"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanovia-program-manager-security-operations-compliance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanovia-program-manager-security-operations-compliance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanovia-program-manager-security-operations-compliance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/anovia-program-manager-security-operations-compliance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanovia-program-manager-security-operations-compliance"}]}