IT GRC Lead

EXPERIENCE

Overall 10-12 years experience or above as a Risk Lead / Head

specializing in technology risks, cloud security risks and third party

risks

EDUCATIONAL QUALIFICATION

1. Bachelors Degree or equivalent in IT or security related field

from an accredited university.

2. Holding at least one security and/or GRC certification is

preferable

KEY SKILLS AND EXPERIENCE

1. Experience in retail industry (preferable) with insight and

understanding of IT policies, standards and procedures

2. Thorough knowledge in evaluation of technologies to be used

and understanding risk strategies to balance risk management

and business enablements

3. Ability to develop risk framework models based on best

practices , industry standards, frameworks and statutory /

regulatory requirements

4. Ability to assure implementation of technology polices and risk

policies leading to substantive improvements in compliance

within large scale companies

5. Strong analytical & problem-solving skills

6. Excellent interpersonal, communication, and presentation

skills, including formal report writing experience

7. Ability to manage multiple tasks, deadlines and resolution of

issues

KEY RESPONSIBILITIES

1. Implement, review and monitor Governance and Risk

programs pertinent to Technology and Digital landscape of the

organization

2. Conduct independent reviews to uncover risks associated with

Digital initiatives, cloud hosting environment (eg: Areas like

Cloud System Access , Cloud Architecture , Data Security and

Integrity, Service Failover Capability, Key Mgmt etc)

3. Review appropriateness of controls related to applications,

cloud and other infrastructure

4. Conduct risk identification , assessment and mitigation for

newly developed IT applications , cloud infrastructure and

other infrastructure

5. Ability to identify , assess and mitigate third party risks

6. Ability to risk-assess third parties prior to onboarding and as a

part of continual monitoring and periodic risk assessments

7. Articulate areas of concerns , risk trends to senior mgmt. for

timely identification and mitigation