Program Manager-Security Operations & Compliance
A hands-on security and compliance role: the hire maintains Anovia's ISO/IEC 27001 ISMS, supports SOC 2/HIPAA audit readiness, coordinates evidence collection and auditor relationships, and manages security tooling (Microsoft 365, Defender, Intune, Entra ID), while also driving loosely defined security and operational initiatives through to completion.
- Compensation
- Not disclosed
- Location
- India
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- 4+ years of progressively responsible experience in information security, IT compliance, GRC, security operations, or a related field
- Practical experience with ISO/IEC 27001, SOC 2, or comparable framework, including meaningful participation in an audit or certification process
- Experience with GRC processes and tools: risk and control management, evidence collection, compliance tracking, audit preparation, remediation
- Working experience with the Microsoft 365 security environment, including Microsoft Defender, Intune, and Entra ID
- Ability to bring structure to ambiguous technical or operational initiatives and drive them to completion
- Working knowledge of information security principles, risk management, access control, vulnerability management, incident response, and security awareness
- Comfortable working directly with auditors, technical teams, business stakeholders, vendors, and leadership
- Strong organizational and communication skills with ability to manage multiple ongoing activities
- Bachelor's degree in Information Security, Computer Science, IT, or a related field, or equivalent practical experience
Nice to have
- Experience with HIPAA Security and Privacy Rule requirements or other healthcare security and privacy requirements
- Experience with GRC platforms such as Secureframe, Vanta, Drata, or OneTrust
- Experience with SIEM, EDR/endpoint protection, vulnerability scanners, or related security tooling beyond Microsoft 365
- Experience with NIST CSF or other complementary security frameworks
- Experience managing contractors or vendors during technical or security initiatives
- Experience helping establish or improve security monitoring, NOC, SOC, or similar operational capabilities
- Experience with business continuity and disaster recovery planning
- Relevant certifications such as ISO/IEC 27001 Lead Implementer/Lead Auditor, CISA, CISSP, or CISM
Full description
Anovia (formerly Innovatia Technical Services) is an industry-leading technology outsourcing support provider with expertise in the telecommunications industry. Operating for over 20 years, we specialize in workflow and knowledge processes, as well as technical support, helpdesk and multilingual support services. With over 200 professional experts across the globe, we service some of the worlds’ most successful Fortune 500 and Fortune 1000 companies.
About the Role
Anovia is looking for a hands-on information security and compliance professional with practical experience working with ISO/IEC 27001, SOC 2, HIPAA, or similar security and compliance programs.
The successful candidate will have experience helping an organization prepare for and work through an audit or certification process, including developing and maintaining policies and controls, supporting evidence collection, coordinating activities and meetings, tracking actions, and working with internal and external auditors.
This is also a build and delivery role. Anovia has a number of technical and operational initiatives that require more structure, planning, coordination, and follow-through. The successful candidate will be comfortable taking an initiative that is not yet well defined, establishing a practical plan, coordinating the people involved, and driving the work through to completion. Examples could include implementing a new security tool, improving security monitoring or vulnerability management, or helping establish a NOC/SOC capability.
Responsibilities
- Maintain and continue to develop Anovia's ISO/IEC 27001 Information Security Management System (ISMS), including policies, procedures, controls, risks, objectives, evidence, and ongoing improvement activities.
- Support ISO 27001, SOC 2, HIPAA, and other security and compliance initiatives as they are introduced and developed.
- Coordinate internal and external audit activities, including preparing evidence, scheduling and facilitating meetings, maintaining action items, and ensuring audit findings and resulting actions are addressed.
- Maintain the information asset inventory and data classification program, including assigning and tracking ownership.
- Support identity and access management activities, including provisioning and de-provisioning, access reviews, least-privilege requirements, and privileged access controls.
- Monitor and improve security tooling and processes, including Microsoft 365 security capabilities, Microsoft Defender, Intune, Entra ID, security monitoring, endpoint protection, and vulnerability management.
- Coordinate vulnerability identification, remediation tracking, and escalation of significant findings.
- Coordinate third-party and vendor security assessments, including security questionnaires and contract review support.