> Markdown version of [/jobs/ext/3614763-director-it-risk-management](https://www.wearedevelopers.com/jobs/ext/3614763-director-it-risk-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director - IT Risk Management

- **Company:** Genpact
- **Location:** Chicago, IL, United States
- **Salary:** $100,000.0 - $125,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Backup Devices, Unix, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Databases, Information Leak Prevention, Data Security, Identity and Access Management, Mainframes, Oracle (Applications), PCI Data Security Standards, Red Team (Cyber Security), SAP GRC, SAP HANA, SQL Databases, IT General Controls (ITGC), Control Structures, Information Technology, Oracle Erp, Cyber Warfare, Service Stack
- **Published:** October 8, 2026
- **Apply:** https://www.disabledperson.com/jobs/75887806-director-it-risk-management

## About the Role

* CA / MBA / Engg / Bachelors in Information Technology
 * Additional qualifications like CISA, DISA, ISO 27001 Lead Auditor, ITIL, Information Security, Certified Fraud Examiner (CFE), etc

Preferred Qualifications/ Skills:

 * Experiences in providing Risk & Advisory services to clients on SOX readiness, SOC, Internal audits, ITAC's, across Business Processes and ERPs and across Operating systems (Windows, UNIX, Mainframe), databases (HANA, Oracle, SQL), key reports.

## Description

In this role, you will be responsible for delivering solution offerings primarily related to IT-SOX., * IT Risk management and compliance: IT SOX, IT-IA, ITRM framework design, IT controls review (plus specific experience in IT compliance areas such as HITrust, HIPPA, PCI-DSS or data privacy regulations)

 * ERP Controllership: Deep experience in SAP, Oracle ERP controls, pre-post implementation audits, SAP GRC/ Oracle GRC, SOD, Access controls, SOX testing in ERP

 * IT Security/ Cyber: Cyber security framework design/ review, cyber defense strategy, conducting various types of cyber audits and security assessments (e.g. VA/ PT) across the technology stack, threat modelling, SOC reviews, Red team.

 * Experience in some specific technology like cryptography, DLP, IAM etc

 * Others: TPRM infosec programs and audits, BCP and DR advisory and reviews, SAM, * Conducted SOC1 / SOC2 Readiness Assessment, compliance to COSO & COBIT Frameworks, IPE testing and interface controls testing

 * Supported clients / projects pertaining to Data Security & Privacy involving HIPPA, GDPR and PCI DSS

 * Performed Risk assessment, Controls Design, implementation, operating effectiveness reviews, including experiences of Control Rationalization and Automation

 * Reviews / Benchmarking of Policies and Procedures pertaining to SDLCs, Change management, Access Management, Backup management, etc

 * Built / reviewed Third-Party Risk Management Frameworks, including focused on Information Security, carried out Supply Chain Security assessments

 * Assisted organizations to set up process for data subject access rights in coordination with GDPR regulation, and mitigate risk with respect data leakage