{"id":3672449,"url":"https://alion.io/job/hcltech-track-lead-operational-risk-sap-security","title":"Track Lead - Operational Risk, SAP Security","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chennai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false}],"status":"live","first_seen_at":"2026-11-03T09:41:45Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-05T06:45:07Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Job Summary\nJob Responsibilities : DR coordination: planning and preparation\nReview the DR scope, scenarios and success criteria with architects and application owners before each exercise, and confirm RTO and RPO targets against business requirements.\nMaintain the application recovery sequence and dependency map with application owners.\nMaintain a call tree and escalation path for the DR exercise and for a real invocation.\nRun a lessons-learned session after each exercise and feed outcomes into runbook and plan updates.\nReview the DR plan at least annually and after any major change in the environment.\nReport DR readiness, exercise results and open findings to leadership and to the customer risk and compliance teams.\nPrepare the DR calendar for mainframe systems (GDPS region switch and Hyperswap tests).\nKeep the DR runbook, DR plan (including backout), each team's DR checklist and the stakeholder list updated.\nBefore the DR exercise, initiate communication with all stakeholders (infrastructure and applications), including leadership.\nBefore the DR exercise, schedule a weekly or bi-weekly interlock to fix all logistics.\nBefore the DR exercise, raise the DR change well before lead time and chase all approvals until ready.\nLead the bridge call during the DR test and facilitate the DR activities until applications testing is successful.\nTrack all issues reported and their timelines.\nSupport the infrastructure and application teams with coordination and communication.\nCapture the regulatory evidence for the defined RTO and RPO.\nPrepare a detailed report with RTO and RPO evidence, findings and the action owner for each finding.\nFollow up closely with finding owners and drive remediation, ensuring all findings are closed before the next DR exercise. Risk, compliance and audit management\nScore and track risks, assign owners and treatment plans, and report risk trends to leadership.\nTrack policy exceptions and control deviations until closure or formal acceptance.\nMap regulatory requirements to mainframe controls and keep the control inventory current.\nTrack regulatory changes in Canada and Europe and assess their impact on the mainframe environment, with architects.\nSupport third-party and service provider risk assessments for mainframe vendors, including the information regulators require on those arrangements.\nSupport incident reporting and post-incident reviews where regulation sets reporting expectations.\nReport on patching and vulnerability remediation status as compliance evidence.\nDefine and track audit and compliance metrics, such as open findings, ageing and on-time closure.\nRetain audit evidence as required by regulators and internal policy.\nOwn and maintain the risk register for all tracks.\nRun periodic access reviews (privileged IDs, offboarded employees, system IDs) and publish the report.\nOrganize periodic internal audits as per the schedule, capture gaps and follow up until remediation.\nOwn and maintain the compliance requirements based on regulatory standards (OSFI, PIPEDA and DORA).\nOwn the implementation of any security controls required from a compliance perspective.\nAct as the single point of contact for internal and external audits.\nEstablish the template for the audit evidence pack and keep it updated as per regulators' requirements.\nCoordinate with the respective teams to gather audit responses within the agreed SLA.\nJob Summary : This role has two parts. As DR Coordinator, it plans, runs and closes out the mainframe disaster recovery exercise (GDPS region switch), including the regulatory evidence for RTO and RPO. As Risk & Compliance Management, it manages the mainframe risk register, access reviews, internal and external audits, and compliance with regulatory standards.\nKey Responsibilities\nNA\nSkill Requirements\nSkill Requirement :\nExperience coordinating DR exercises for mainframe environments, with working understanding of GDPS and the concepts of RTO and RPO.\nExperience with change management and stakeholder coordination across infrastructure and application teams, including leadership.\nExperience supporting internal and external audits, including evidence preparation and finding remediation.\nFamiliarity with regulatory expectations for financial institutions and insurers, such as OSFI guidelines (for example B-13 on technology and cyber risk, B-10 on third-party risk and E-21 on operational risk and resilience), PIPEDA, DORA (Regulation (EU) 2022/2554), GDPR and Solvency II.\nWorking knowledge of access management and mainframe security controls at the level needed to run and review access reviews.\nStrong written reporting skills for DR reports, risk reporting and audit responses.\nPreferred certifications: ITIL, CISA, CRISC, ISO 27001, or a business continuity certification such as CBCP or MBCI.\nOther Requirements\nNA","description_format":"text","description_chars":4828,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Science & Engineering","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-03T09:41:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":26,"reasons":["conf:5","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-track-lead-operational-risk-sap-security","json_url":"https://alion.io/job/hcltech-track-lead-operational-risk-sap-security.json","meta":{"generated_at":"2026-11-05T10:42:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13611,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-track-lead-operational-risk-sap-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-track-lead-operational-risk-sap-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-track-lead-operational-risk-sap-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-track-lead-operational-risk-sap-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-track-lead-operational-risk-sap-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3672449}},{"tool":"search_jobs","arguments":{"company":"hcltech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3672449},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}