Information Security Risk Manager

Crédit Agricole Group; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Crédit Agricole Group in Mumbai is seeking an experienced Information Security Risk Manager to strengthen our IS risk management and control environment, ensuring robust governance and regulatory alignment for CACIB India.

You will lead RBI audits, coordinate closure of findings with global stakeholders, oversee risk-based deep-dives to identify root causes, track remediation, and assist the CISO in implementing security controls across the organization, including policy updates.

Responsibilities

• Contribute to the development and maintenance of a robust Information Security Risk management framework including Cyber Security, ensuring alignment with legal entity regulatory requirements for CACIB India.
• Handling regulatory (primarily Reserve Bank of India) internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders across the globe.
• Coordinate tracking and closure of risk recommendations arising from audits, assessments,& risk reviews, ensuring timely remediation and escalation where necessary.
• Engage with multiple stakeholders, including global teams, to ensure effective implementation of IS Risk management initiatives.
• Establish and ensure implementation of IS Risk policies, procedures, and standards across the organization.
• Perform risk-based deep dives to identify IS Risks, validate root causes for IS-related events, and recommend corrective actions
• Stay abreast of changes in Indian regulations pertaining to Information Security Risk Management and escalte relevant updates to Head Office (HO) as applicable.
• Participate in and contribute to the implementation of the global control plan.
• Assess and control the Information Security implications of local changes to processes or systems, ensuring adherence to group policies by coordinating with relevant stakeholders.
• Assist CISO in implementing and maintaining security controls across the organization.

Job description

An experienced Information Security Risk Manager to strengthen our IS Risk management and control environment. The candidate shall also be responsible for managing audits and ensuring timely compliance including tracking of audit recommendations/findings. The ideal candidate must possess strong IS Risk management experience, preferably within the BFSI sector.

Key Responsibilities

• Contribute to the development and maintenance of a robust Information Security Risk management framework including Cyber Security, ensuring alignment with legal entity regulatory requirements for CACIB India.
• Handling regulatory (primarily Reserve Bank of India) internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders across the globe.
• Coordinate tracking and closure of risk recommendations arising from audits, assessments,& risk reviews, ensuring timely remediation and escalation where necessary.
• Engage with multiple stakeholders, including global teams, to ensure effective implementation of IS Risk management initiatives.
• Establish and ensure implementation of IS Risk policies, procedures, and standards across the organization.
• Perform risk-based deep dives to identify IS Risks, validate root causes for IS-related events, and recommend corrective actions
• Stay abreast of changes in Indian regulations pertaining to Information Security Risk Management and escalte relevant updates to Head Office (HO) as applicable.
• Participate in and contribute to the implementation of the global control plan.
• Assess and control the Information Security implications of local changes to processes or systems, ensuring adherence to group policies by coordinating with relevant stakeholders.
• Assist CISO in implementing and maintaining security controls across the organization.