Senior Manager/Manager - Risk Management - IT

CDSL -
Mumbai, Maharashtra

Apply Now

Job details

Qualifications

Computer Science
COBIT
IT management
PCI
CISSP
SOX
Information security
Master's degree
CISM
Bachelor's degree
NIST standards
ISO 27000
Business Administration
Root cause analysis
MBA

Full job description

Position

Location

Qualification

Age Limit

Senior Manager/Manager - Risk Management

Mumbai

Master’s/ bachelor’s degree or MBA in engineering/ Information system/computer science or a related field.

Relevant certifications such as CISA/CISSP/ CRISC/CISM/DISA or any other recognized Risk Management Certification/ IT Risk Management Certification.

Strong knowledge of IT management frameworks, industry standards and best practices (e.g., ISO 27000 NIST Cyber Security Framework, PCI-DSS, ITIL, OWASP, SOX, COBIT, SSAE18/ISAE 3402 etc).

Experience & Role:

Minimum of 7-8 years of experience in related field such as IT general controls, internal/external audit relationships, IT risk management, IT security standards, or IT change management.

Skills and requirements:

Exposure to Risk Management and Governance Frameworks/ Systems and multiple ERP systems.

Fundamental understanding of data analysis/GRC tools and techniques.

Familiarity with Indian regulatory requirements related to it risk management including those issued by SEBI.

Ability to interpret regulations and laws and understand industry audit and control standards and practices.

Up-to-date knowledge of emerging IT and cyber risk, security threats and industry trends.

Ability to work in partnership with IT Groups and business units to assure IT practices meet defined policies, standards, and key business objectives for continuous IT compliance.

Experience in leading, managing and performing risk assessments, risk and control self-assessments, training/awareness efforts, control testing, and enterprise-wide risk programs.

Job Description :

Co-ordinating with various departments to continuously identify, mitigate, and manage risks.

Defining & Assessing Key Risk Indicators (KRI Metrics) for Technology and Information Security related processes.

Ability to perform Root Cause Analysis (RCA) for Technology & Information Security related processes.

Perform Risk Control Self-Assessment, assign risk severity score/rating and track / report the mitigation plans to remediate the risks identified.

Review processes & existing policies/procedures and assist IT process owners in the creation and maintenance of these policies/procedures.

Coordinate with auditors for IT audits of CDSL and its intermediaries and facilitate CDSL’s Audit findings closure by follow-up with respective teams.

Support information assurance, highlight key control deficiencies and ensure regulator mandated compliance.

Performing Third Party Assessment of vendor and partners.

Ability to perform assessment of IT General Controls (ITGC) for Technology & Information security related processes.

Develop and maintain periodic risk reporting to stakeholders for effective tracking and reporting of risk items and issues across business functions.

Monitor and track all the findings of the control validation reviews and self-identified issues using the corporate tools & controls.

Support and co-ordinate with various departments to implement all key operational risk components/ programs applicable to different business functions. The operational risk components include Information Technology, Information Security, Business Continuity, Vendor Management, Regulatory Compliance and Control Validation etc.

Current CTC and Expected CTC to be mentioned clearly.
Please email your resume, mentioning the position applied for in the subject column at :[email protected]

Apply Now

Jobseeker tools

Employer Tools

Browse

Stay Connected