Sr Lead - Captive Operations

Job Description - GRC / RSA Archer Consultant

Experience: 5-6 Years
Role: GRC / RSA Archer Consultant

Archer Experience: Preferably 3 Years
Primary Skills: RSA Archer, GRC, IT Risk, Cybersecurity Risk, Compliance, Audit, TPRM, Risk Assessment, Reporting Dashboard

Role Overview

We are looking for an experienced GRC professional with strong hands-on expertise in RSA Archer to manage and support Governance, Risk, Compliance, Information Security Risk, Audit, and Regulatory Compliance processes.

The candidate will be responsible for administration, configuration, implementation, workflow management, reporting, issue resolution, and continuous improvement of the Archer GRC platform while working closely with Information Security, Risk, Audit, Compliance, IT, business teams, and external stakeholders.

Key Responsibilities

RSA Archer - Platform Administration

Administer and support the RSA Archer GRC platform.

Configure applications, questionnaires, dashboards, reports, data feeds, notifications, workflows, and access controls.

Develop and maintain Archer applications and use cases based on business and regulatory requirements.

Configure user roles, permissions, access control, and security groups.

Troubleshoot Archer application, workflow, data, and integration-related issues.

Perform platform health checks and coordinate with OEM/vendor for product-related issues.

Manage application changes, enhancements, releases, and upgrades.

Maintain Archer configuration documentation and operational procedures.

GRC Risk Management

Support implementation and management of Enterprise Risk Management (ERM) processes.

Manage Information Security and IT Risk assessments through Archer.

Develop and maintain risk registers, risk assessments, risk treatment plans, and remediation tracking.

Support identification, assessment, monitoring, and reporting of technology and cybersecurity risks.

Define and monitor risk indicators, including KRIs and KPIs.

Support risk acceptance, exception management, and risk remediation processes.

Audit Issue Management

Manage internal and external audit activities using Archer.

Configure audit engagements, control testing, observations, findings, and remediation workflows.

Track audit issues and action plans through closure.

Generate management dashboards and reports for audit and compliance status.

Coordinate with control owners and stakeholders for timely closure of findings.

Third-Party / Vendor Risk Management

Support Third-Party Risk Management (TPRM) processes using Archer.

Configure vendor assessments, inherent risk assessments, questionnaires, and due diligence workflows.

Track vendor risks, exceptions, remediation actions, and compliance status.

Support periodic vendor reassessment and reporting.

Reporting Dashboard

Develop management dashboards and reports for:

Enterprise Risk

Cybersecurity Risk

Compliance

Audit

Third-Party Risk

Policy compliance

o Exceptions

o Remediation status

Integration Automation

Work with application, security, and infrastructure teams for integration of Archer with enterprise systems.

Support integration through APIs, data feeds, and other available mechanisms.

Automate repetitive GRC processes and reporting wherever possible.

Troubleshoot data synchronization and integration issues.