Deputy Manager - Information Security

<p style="line-height:1;"><span style="font-family:Calibri;font-size:10px;"><b> </b></span><span style="font-family:Calibri;font-size:10px;"><b> </b></span><span style="font-family:Calibri;font-size:10px;"><b> </b></span></p><h2 style="margin:6pt 0in;line-height:1;"><span lang="en-au" style="font-size:10pt;font-family:Calibri, sans-serif;" xml:lang="en-au"><b><span style="font-family:Calibri;font-size:10px;"><u><span style="font-size:10px;">POSITION:</span></u><span style="font-size:10px;"> Deputy Manager - Information Security</span></span></b></span></h2><h2 style="margin:6pt 0in;line-height:1;"><b style="font-family:Calibri;font-size:10px;"><u><span style="font-size:10px;">Reports to (Position):</span></u><span style="font-size:10px;"> VP/AVO Information Security</span></b></h2><h2 style="margin:6pt 0in;line-height:1;"><b style="font-size:10px;font-family:Calibri;"><u><span style="font-size:10px;">Business Unit:</span></u><span style="font-size:10px;"> Invesco Asset Management India</span></b></h2><h2 style="margin:6pt 0in;line-height:1;"><font face="Calibri"><span style="font-size:10px;"><b><u><span style="font-size:10px;">Location:</span></u><span style="font-size:10px;"> Mumbai</span></b></span></font></h2><h2 style="margin:6pt 0in;line-height:1;"><b style="font-size:14px;"><span style="font-size:10pt;line-height:115%;"><span style="font-family:Calibri;font-size:10px;"><u>Principal Accountabilities:</u></span></span></b></h2><h2 style="margin:6pt 0in;line-height:1;"></h2><ul style="margin-top:0cm;" type="disc"><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Develop, implement, and maintain the GRC framework for information security.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Conduct regular audits to assess the effectiveness of security controls and compliance with regulations and internal policies.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Collaborate with internal stakeholders to identify and mitigate information security risks.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Ensure compliance with relevant regulatory requirements, laws: including data protection laws and industry standards.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Prepare detailed audit reports and present findings to senior management, along with remediation recommendations.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Monitor changes in regulations and industry standards to ensure ongoing compliance.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Facilitate training and awareness programs for employees on security policies and regulatory requirements.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Work closely with IT and other departments to ensure integration of security controls into business processes.</span></span><p></p></li></ul><h2 style="margin:6pt 0in;line-height:1;"><b style="font-size:14px;"><span style="font-size:10pt;line-height:115%;"><span style="font-family:Calibri;font-size:10px;"><u>Knowledge, Skills, Competencies, and Certifications:</u></span></span></b></h2><h2 style="margin:6pt 0in;line-height:1;"></h2><ul style="margin-top:0cm;" type="disc"><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Strong understanding of Information security and control frameworks (e.g., ISO 27001/27002, COBIT, NIST).</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Knowledge of regulatory requirements specific to the financial services sector, including SEBI, DPDPA, etc.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Excellent analytical skills and attention to detail for conducting audits and assessments.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Strong communication and interpersonal skills to effectively convey compliance requirements.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Ability to work independently and collaboratively in a cross-functional environment.</span></span><p></p></li><li class="MsoNormal"><span lang="en-us" style="font-family:Arial, sans-serif;" xml:lang="en-us"><span style="font-size:10px;">Proficiency in GRC tools and audit methodologies.</span></span></li></ul><h2 style="margin:6pt 0in;line-height:1;"><b style="font-family:Calibri, sans-serif;font-size:10pt;"><span style="font-family:Calibri;font-size:10px;"><br /></span></b></h2><span style="font-family:Calibri;font-size:10px;"><b> </b></span><span style="font-family:Calibri;font-size:10px;"><b> </b></span><span style="font-family:Calibri;font-size:10px;"><b> </b></span>