|
Job Description & Summary: We are seeking a senior leader to drive
Data Privacy, IT Governance, Risk & Compliance (IT GRC), Cyber Risk, and
Financial Services regulatory compliance engagements. The candidate will lead
complex transformation, compliance, risk management, and regulatory advisory
programs for Banks, NBFCs, Insurance companies, FinTechs, and other regulated
entities while serving as a trusted advisor to Boards, Audit Committees,
CROs, CISOs, CIOs and DPOs.
.
|
|
Job Position Title:
|
Senior Manager /ITGC_FS-Cyber as
a service_Advisory /Bangalore
|
|
Responsibilities:
|
- Key
Responsibilities:
- Data
Privacy & Data Protection
- Lead DPDP
compliance programs, privacy assessments and remediation initiatives.
- Serve as
DPO/vDPO for client engagements.
- Establish
Privacy-by-Design, consent management, DSAR and breach management
frameworks.
- Lead
enterprise data governance and data protection initiatives
- IT
Governance, Risk & Compliance (IT GRC)
- Design and
implement enterprise IT GRC frameworks.
- Lead IT
risk assessments and risk quantification exercises.
- Establish
governance structures, policies, standards and controls.
- Drive risk
and control self-assessment (RCSA) programs.
- Develop
Key Risk Indicators (KRI) and control monitoring frameworks.
- Conduct
controls rationalization and compliance monitoring.
- Support
Board and Audit Committee reporting.
- Financial
Services Regulatory Compliance
- Advise
clients on RBI regulations and supervisory expectations.
- Support
compliance with RBI IT Governance, Cyber Security Framework, Digital
Lending, Outsourcing, Operational Risk and IT Risk Management
guidelines.
- Conduct
regulatory gap assessments and remediation planning.
- Assist
clients during RBI inspections and regulatory reviews.
- Review
regulatory submissions and compliance attestations.
- Enterprise
& Operational Risk Management
- Enterprise
Risk Management (ERM)
- Operational
Risk Management
- Third-Party
Risk Management (TPRM)
- Technology
Risk Management
- Business
Continuity & Resilience
- Scenario
Analysis and Stress Testing
- Risk
Appetite Frameworks
- Internal
Control Design and Effectiveness Reviews
·
Cyber Risk & Security Governance
- Information
Security Governance
- Cyber Risk
Assessments
- Security
Program Reviews
- ISMS and
PIMS Implementation
- Security
Metrics and Reporting
- Security
Architecture Governance
- Vulnerability
and Cyber Control Assessments
- Regulatory
Cyber Compliance Programs
|
|
Mandatory skill sets:
|
- IT
Governance, Risk & Compliance (IT GRC)
- Risk &
Control Frameworks
- Operational
Risk Management
- Enterprise
Risk Management (ERM)
- Technology
Risk Management
- Regulatory
Compliance Management
- Data
Privacy & DPDP Act
- Information
Security Governance
- Internal
Controls & Compliance Testing
- Third
Party Risk Management (TPRM)
- RCSA, KRI
& Control Monitoring
- Audit
& Assurance
- Business
Continuity & Resilience
- Financial
Services Risk & Regulation
- Board
& Audit Committee Reporting
- Stakeholder
& Executive Management
|
|
Preferred skill sets:
|
Information
Security Governance
- DPDP Act
- RBI Cyber
Security Framework
- RBI IT
Governance Directions
- RBI
Outsourcing & IT Services Regulations
- RBI
Operational Risk Guidelines
- SEBI Cyber
Security & Cyber Resilience Framework
- IRDAI
Information & Cyber Security Guidelines
- ISO 27001
- ISO 27701
- ISO 31000
- ISO 22301
- NIST CSF
- COBIT
- GDPR
|
|
Years of experience required:
|
8-15
years
|
|
Education qualification:
|
B.Tech/MCA/MBA
with IT background/ Bachelor’s degree in Information Technology,
Cybersecurity, Computer Science
|
|
Preferred Certifications
|
- CRISC
- CISA
- CISM
- ISO 27001
Lead Auditor / Implementer
- ISO 27701
Lead Implementer
- CDPSE
- CGEIT
- ISO 31000
Risk Management
- Certified
Internal Auditor (CIA) (preferred)
- Privacy
Certifications such as CIPP/CIPM/CDPO
|
