Senior Manager/Manager - Risk Management - IT

Position Location Qualification Age Limit

• *Senior Manager/Manager \- Risk Management** Mumbai
• Master’s/ bachelor’s degree or MBA in engineering/ Information system/computer science or a related field.

• Relevant certifications such as CISA/CISSP/ CRISC/CISM/DISA or any other recognized Risk Management Certification/ IT Risk Management Certification.

• Strong knowledge of IT management frameworks, industry standards and best practices (e.g., ISO 27000 NIST Cyber Security Framework, PCI\-DSS, ITIL, OWASP, SOX, COBIT, SSAE18/ISAE 3402 etc).

• *Experience \& Role:**

• Minimum of 7\-8 years of experience in related field such as IT general controls, internal/external audit relationships, IT risk management, IT security standards, or IT change management.

• *Skills and requirements:**

• Exposure to Risk Management and Governance Frameworks/ Systems and multiple ERP systems.

• Fundamental understanding of data analysis/GRC tools and techniques.

• Familiarity with Indian regulatory requirements related to it risk management including those issued by SEBI.

• Ability to interpret regulations and laws and understand industry audit and control standards and practices.

• Up\-to\-date knowledge of emerging IT and cyber risk, security threats and industry trends.

• Ability to work in partnership with IT Groups and business units to assure IT practices meet defined policies, standards, and key business objectives for continuous IT compliance.

• Experience in leading, managing and performing risk assessments, risk and control self\-assessments, training/awareness efforts, control testing, and enterprise\-wide risk programs.

• *Job Description :**

• Co\-ordinating with various departments to continuously identify, mitigate, and manage risks.

• Defining \& Assessing Key Risk Indicators (KRI Metrics) for Technology and Information Security related processes.

• Ability to perform Root Cause Analysis (RCA) for Technology \& Information Security related processes.

• Perform Risk Control Self\-Assessment, assign risk severity score/rating and track / report the mitigation plans to remediate the risks identified.

• Review processes \& existing policies/procedures and assist IT process owners in the creation and maintenance of these policies/procedures.

• Coordinate with auditors for IT audits of CDSL and its intermediaries and facilitate CDSL’s Audit findings closure by follow\-up with respective teams.

• Support information assurance, highlight key control deficiencies and ensure regulator mandated compliance.

• Performing Third Party Assessment of vendor and partners.

• Ability to perform assessment of IT General Controls (ITGC) for Technology \& Information security related processes.

• Develop and maintain periodic risk reporting to stakeholders for effective tracking and reporting of risk items and issues across business functions.

• Monitor and track all the findings of the control validation reviews and self\-identified issues using the corporate tools \& controls.

• Support and co\-ordinate with various departments to implement all key operational risk components/ programs applicable to different business functions. The operational risk components include Information Technology, Information Security, Business Continuity, Vendor Management, Regulatory Compliance and Control Validation etc.

• *Current CTC and Expected CTC to be mentioned clearly.**

• *Please email your resume, mentioning the position applied for in the subject column at :****careers@cdslindia.com**