IT GRC Manager

Role & responsibilities

• Create and maintain the documentation for IT/IS governance risk management and audits in accordance with regulatory & compliance requirements.
• Responsible for conducting CAB (Change Advisory Board) meetings, recording and tracking the actions.
• Monitoring and ensuring the policy / Standard Operating Procedures adherence across different IT functions.
• Provide input to the policies and standards process to consider information management controls and requirements.
• Provide guidance in the design and implementation of security controls in line with policies and standards defined.
• Collect and analyse risk and compliance metrics and reporting.
• The person needs to work closely with the CISO, CTO and other stakeholders in Risk, IT and Audit functions.
• Demonstrate in-depth technical capabilities and professional knowledge, demonstrate ability to assimilate new knowledge.

Preferred candidate profile

1. 4-5 years of relevant work experience in Information Technology (IT) / (IS) Information Security Governance policies, standards, compliance or risk management functions.
2. Candidates must have worked in NBFC or Banking projects.
3. Understanding of RBI guidelines is a must.
4. Exposure to Information security management system (ISMS) Policies, Standards, Process documentation.
5. Experience in handling or conducting audits and ensure closure of observations within given timelines.
6. Monitoring and ensuring the policy / SOP adherence across different IT functions.
7. Convening management level steering committee meetings, recording and ensuring the actions derived are tracked and closed within the agreed timelines.
8. Responsible for conducting CAB (Change Advisory Board) meetings, recording and tracking the actions.
9. Good understanding of IT/IS & Cyber risks.