Information Security Risk Manager

Crédit Agricole SA; Mumbai; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Crédit Agricole CIB in Mumbai, India seeks an experienced Information Security Risk Manager to strengthen IS risk management and control environments. The role includes managing audits and ensuring timely compliance with RBI regulations, with interaction across global stakeholders.

The ideal candidate has 8+ years in information security, strong IS risk expertise, and certifications such as CRISC/CISA/ISO 27001 Lead Auditor.

Qualifications

• Bachelor degree or equivalent in technology/computer science.
• 6-10 years of experience in Information Security.
• Experience handling RBI audits and cross-border coordination.
• Strong knowledge of IS risk and controls frameworks.

Responsibilities

• Develop and maintain an IS risk management framework aligned with RBI requirements.
• Manage regulatory, internal, and external audits including closure of findings.
• Coordinate risk recommendations tracking and timely remediation.
• Engage with global stakeholders to implement IS risk initiatives.
• Establish IS risk policies, procedures, and standards.
• Perform risk-based deep dives and propose corrective actions.
• Monitor Indian regulatory changes and inform Head Office.
• Support CISO in implementing security controls.

Skills

Communication

Analytical Thinking

Proactive & Motivated

Multitasking

Technical Proficiency

Education

Bachelor's degree / BTech / BE / BSc CS

Tools

COBIT

ISO 27001

ISO 31000

ITIL

Job description

An experienced Information Security Risk Manager to strengthen our IS Risk management and control environment. The candidate shall also be responsible for managing audits and ensuring timely compliance including tracking of audit recommendations/findings. The ideal candidate must possess strong IS Risk management experience, preferably within the BFSI sector.

Supplementary Information

Key Responsibilities

• Contribute to the development and maintenance of a robust Information Security Risk management framework including Cyber Security, ensuring alignment with legal entity regulatory requirements for CACIB India.
• Handling regulatory (primarily Reserve Bank of India) internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders across the globe.
• Coordinate tracking and closure of risk recommendations arising from audits, assessments,& risk reviews, ensuring timely remediation and escalation where necessary.
• Engage with multiple stakeholders, including global teams, to ensure effective implementation of IS Risk management initiatives.
• Establish and ensure implementation of IS Risk policies, procedures, and standards across the organization.
• Perform risk-based deep dives to identify IS Risks, validate root causes for IS-related events, and recommend corrective actions
• Stay abreast of changes in Indian regulations pertaining to Information Security Risk Management and elevate relevant updates to Head Office (HO) as applicable.
• Participate in and contribute to the implementation of the global control plan.
• Assess and control the Information Security implications of local changes to processes or systems, ensuring adherence to group policies by coordinating with relevant stakeholders.
• Assist CISO in implementing and maintaining security controls across the organization.

Geographical area

Asia, India

City

MUMBAI

Bachelor Degree / BSc Degree or equivalent

Education Qualification

Bachelor of Technology (B.Tech) or Bachelor of Engineering (B.E.) OR Bachelor of Science in Computer Science (B.Sc. Computers)

Preferred Certifications

CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor), ISO 27001 Lead Auditor/Implementer, ISO 31000 Risk Management, COBIT (Control Objectives for Information and Related Technologies), ITIL (Information Technology Infrastructure Library)

Level of minimal experience

6-10 years

Experience

• Minimum 8 years of professional experience in Information Security or related fields, preferably within the BFSI domain.
• Prior experience in handling audits- regulatory (preferably, Reserve Bank of India), internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders including IT, preferably across the globe.
• Strong understanding of the Banking regulatory landscape in India.
• Strong Information Security background with knowledge across various domains such as Network Security, Data Security, Security Operations Center (SOC), etc.
• Prior experience engaging with multiple stakeholders, preferably across global entities.
• Hands-on experience working with IT teams on information security projects.
• Experience in coordinating and tracking recommendations from audits, assessments, and risk reviews to ensure timely closure.

Required skills

• Communication: Excellent interpersonal and communication skills in English (written and spoken) to effectively communicate at all organizational levels, from staff to senior management.
• Analytical Thinking: Strong rational, critical thinking, and reasoning skills.
• Proactive & Motivated: Self-driven with excellent people skills and the ability to work collaboratively.
• Multitasking: Ability to multitask and quickly learn about diverse subjects.
• Technical Proficiency: Advanced user of Microsoft Office tools (Excel, Word, PowerPoint).

Technical skills required

• Solid understanding of IS Risk and control frameworks (certifications such as COBIT, ISO 27001, ISO 31000, ITIL, or equivalent are highly preferred).
• Knowledge of IT networks, ISO Controls, NIST framework for IT security, and cyber security controls.
• In-depth knowledge of banking systems, Information System general architecture, and various IT actors (support teams, development teams, etc.).

General information

Entity

About Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB) Crédit Agricole CIB is the corporate and investment bank of the Crédit Agricole group, the 10th largest banking group in the world *. We support major companies and financial institutions in their development and the financing of their projects. As pioneers in responsible finance, social and environmental commitments are at the heart of our activities. Joining our teams means working in a multicultural environment, both dynamic and stimulating, where you will contribute to developing a sustainable economy. We support employees throughout their journey: you will develop your skills and access various mobility opportunities among the diversity of our businesses in more than 30 international locations. Our culture is built on collaboration, innovation and openness, where everyone is valued and empowered. By working every day in the interest of society, Crédit Agricole CIB aligns with the Group values committed to diversity and inclusion and placing people at the heart of all its transformations. All our jobs are open to people with disabilities. We welcome applications from candidates of all backgrounds and experiences. Ready to take part in our mission ? *By balance sheet size - The Banker, Juillet 2025