Risk Management - Officer/Manager

Direct Responsibilities:

• Eective implementation of Risk Management Policy & Risk Aspects of ISMS Policies,

Business Continuity Policy, Data Privacy Policy, & other related policies of the company and

compliance/monitoring the same.

• Identify, Assess, Measure, Mitigate and Review Risks in IT, Operations and other functional

Areas of the company.

• Continuously monitor and control the level of risk in the Company.

• Periodical review of the Risk Appetite, Risk Management Framework and Risk Management

Policy.

• Prepare a risk map, of the Company at least on a quarterly basis and an annual risk

management report.

• Develop a risk assessment framework to identify, assess, mitigate, and monitor risks.

• Collect reports and/or information from the departments and employees of the Company

for Risk Assessment, Risk Reporting & MIS.

• Prepare and regularly review and update the risk training and testing material taking into

account the most common risk sources.

• Ensure the information on the identified risk factors, risk changes, etc. is passed to the

Management/ Enterprise Risk Management Committee in a timely manner.

• Assess the eectiveness of the use of the risk limits.

• Prepare, implement and oversee Companys risk management documents (procedures,

policies, strategies, registers etc.)

• Seek to ensure eective functioning of the Risk Management System, promote risk

awareness and management.

• Provide guidance to the employees as much as it is related to the identification,

management and elimination of risks

• Review/Monitor the Risk Assessments on new and existing applications to ensure strong

risk management strategies, tools, frameworks and standards are in place.

• Coordinate with IT, SOC and business function to drive risk assessment and remediation.

• Prepare RISK and Related Agenda Notes to the Enterprise Risk Management

Committee/Risk Management Committee of the Board/Board and other committees.

Contributing Responsibilities:

• Coordinate & Assist: IT-Internal Audits, ISO 27001 & other ISO Certification Audits, SOC

Audits, UIDAI IS AUDIT and other related Audits.

• Coordinate & assist in preparation/review of documentation, process & procedure for ISO

certifications like ISO 27001, ISO 22301, ISO 27701

• Assist in preparing and monitoring IT compliance check list, UIDAI Self-Assessment etc.

• Must be motivated, and able to work independently as well as part of a team and must

demonstrate ethical responsibility, maturity, and discretion.

Technical & Behavioural Competencies:

• Knowledge of Risk Management Principles/Concepts.

• Must have demonstrable previous experience in Risk Management function/

Audits/Compliance. Relevant Exposure in Banking/financial institutions preferred.

• Knowledge of Risk Management Tools.

• Knowledge of the Indian financial markets, banking system and its related instruments

• Understanding /Exposure /Experience in IT Security/ Security System development, and/or

operations. Vulnerability/ Patch Management/DevSecOps is a plus.

• Have good understanding of Information Technology/ Cyber Security, Data Privacy laws,

rules & regulations.

• Have general knowledge on emerging technologies such as Fintech, Mobile & Virtualization.

• Analytical, problem-solving and communication skills

• Must have Good English oral and written communication. Other Indian languages should be

highlighted.

Education Level:

• BE/B. Tech/bachelor’s degree or equivalent.

• Specialization in Risk Management/Cyber Security/Information Security/Information

Technology preferred.

Specific