Information Risk Assessment - AM - BLR/GG

Sampoorna Computer People; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Sampoorna Computer People is seeking an Assistant Manager for Information Risk Assessment to join our Bengaluru team. The role focuses on conducting risk assessments for technologies, suppliers, and hybrid projects, advising on controls, and ensuring risks stay within agreed limits.

You will support the Information Risk Assessments Manager, maintain SLAs with business stakeholders, and promote information security practices across the firm while staying current with industry best practices.

Responsibilities

• Conduct Information Security Risk assessments of the technologies used.
• Supplier information risk assessments are completed in line with the inherent risk rating.
• Appropriate information security contractual clauses are used in any formal agreement.
• Provide support to the Information Risk Assessments Manager. Working within agreed timescales, and keeping the Information Risk Assessments on track within agreed SLAs with business stakeholders.
• Along with other Risk Assessors, responsible for performing risk assessments upon projects, suppliers and hybrid (technology projects with a supplier), managed technology solutions, managing demand and prioritising assessment appropriately.
• Provide guidance towards completing risk assessments
• Provide consulting advice to CTO's, Technology Engineering and Operations, business service owners and 3rd parties on how best to implement the firm's information security policies
• Support the firm's mission to build client trust and confidence with regard to information security generally and information risk assessment specifically
• Stay abreast of industry best practice in relation to information risk assessments
• Support the delivery of a high-quality and timely information risk assessment service to the firm.
• Promote good information security practices and standards across the firm.
• Proactively foster an environment that drives appropriate information risk control behaviour, including early anticipation, identification and mitigation of information risk, as well as escalation of issues in line with the Information Risk Management Framework.
• Support the ongoing development and maintenance of the firm's Information Risk Management Framework, including its supporting methodologies, processes and artefacts.
• Working with Project Team and requestors to ensure the accuracy of Risk Assessment forms, managing expectations, clarifying timelines and obtaining artefacts for the Risk Assessment Process.
• Ensure teams understand the Information Risk Assessment process and manage the process for specific assessments.
• Support the Information Risk Assessment team with other ad hoc work as required.
• Establish strong relationships with business, functional teams and other relevant stakeholders.
• Build on and preserve the firm's reputation with third-party suppliers around information security.

Job description

Information Risk Assessment - AM - BLR/GG - J50881

Role & responsibilities

The role holder will be an assistant manager in the Information Risk Assessment team, helping to provide information risk assessments by supporting how the firm identifies and analyses information security threats and risks to client information in projects, initiatives, applications and IT resources, to advise on the controls necessary to keep these risks within agreed limits. The role holder will provide support for the day-to-day service, to support the Information Risk Assessments Manager ensuring risks are identified and are entered into the Information Risk Assessment tool.

Key Activities include:

Conduct Information Security Risk assessments of the technologies used.

Supplier information risk assessments are completed in line with the inherent risk rating.

Appropriate information security contractual clauses are used in any formal agreement.

Provide support to the Information Risk Assessments Manager. Working within agreed timescales, and keeping the Information Risk Assessments on track within agreed SLAs with business stakeholders.

Technical Information Risk Assessment

Along with other Risk Assessors, responsible for performing risk assessments upon projects, suppliers and hybrid (technology projects with a supplier), managed technology solutions, managing demand and prioritising assessment appropriately.

Provide guidance towards completing risk assessments

Provide consulting advice to CTO's, Technology Engineering and Operations, business service owners and 3rd parties on how best to implement the firm's information security policies

Support the firm's mission to build client trust and confidence with regard to information security generally and information risk assessment specifically

Stay abreast of industry best practice in relation to information risk assessments

Support the delivery of a high-quality and timely information risk assessment service to the firm.

Promote good information security practices and standards across the firm.

Information Risk Management

Proactively foster an environment that drives appropriate information risk control behaviour, including early anticipation, identification and mitigation of information risk, as well as escalation of issues in line with the Information Risk Management Framework.

Support the ongoing development and maintenance of the firm's Information Risk Management Framework, including its supporting methodologies, processes and artefacts.

Co-ordination

Working with Project Team and requestors to ensure the accuracy of Risk Assessment forms, managing expectations, clarifying timelines and obtaining artefacts for the Risk Assessment Process.

Ensure teams understand the Information Risk Assessment process and manage the process for specific assessments.

Support the Information Risk Assessment team with other ad hoc work as required.

Awareness and collaboration

Establish strong relationships with business, functional teams and other relevant stakeholders.

Build on and preserve the firm's reputation with third-party suppliers around information security.