IT OPC Control Analyst

Mployee.me; Mumbai; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Mployee.me in Mumbai/Chennai seeks an IT Risk & Controls professional to assure controlled IT operations. The role covers risk assessment, control execution, and collaboration with global teams to maintain certification and governance across IT domains.

Ideal candidates have a background in IT risk, strong analytical skills, and a proactive, delivery-focused mindset. Bachelor's or Master's degree required, with emphasis on internal/external audits and compliance.

Qualifications

• IT background with risk and controls focus.
• Experience with IT risk frameworks and standards.
• Understanding of IT software, infrastructure and IT service management.
• ISO 27001 certification.
• Knowledge of key regulations.

Responsibilities

• Conduct periodic controls assessments across process areas and follow up on corrective actions.
• Liaise with global and local IT control areas for timely certification.
• Perform Root Cause Analysis of process issues and non-conformities at project and application domain level.
• Assist in minimizing production risks by implementing regular controls.
• Escalate issues to management when identified.
• Enforce Permanent Controls and provide ongoing control status.
• Contribute KPIs/KRIs to scope reports/dashboards.
• Assist with historical incident management including root cause analysis and impact evaluation.
• Maintain ISPL Permanent Control Framework and OPC IT processes.

Skills

IT Risk & Audit

IT Controls

IT Service Management

Analytical thinking

Problem solving

Structured mindset

Proactive work style

Ownership

Team oriented

Communication

Big picture thinking

Client focus

Pragmatic approach

Education

Bachelor/Master degree

Tools

ISO 27001 Certified

Job description

Position Purpose:

The role is to provide both the Business Units and IT Management with the assurance and visibility that IT Controls are executed in a controlled and managed way. In addition to the specific responsibilities detailed below, the successful candidate will be expected to demonstrate understanding in other areas of Risk & Control Management including strategies surrounding Process Engineering, Configuration Management, Change, Incident & Problem Management, Non-Conformities and Corrective Actions Management, Risk Identification and Control, Project Management and Tools and Methods.

Responsibilities

Direct Responsibilities

• Conduct periodic controls assessments across process areas in scope. Raise any non-compliance and follow up of the corrective actions until closure.
• Liaise with global and local IT control areas to ensure their certification is timely and appropriate.
• Perform periodic Root Cause Analysis of process issues and non-compliances at Project and Application Domain level. Ensure that the exercise is planned, executed effectively and reported to appropriate level.
• Participate in minimising production risks and issues, including but not exclusively, by helping to devise, and by implementing, sufficient regular controls.
• Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
• The enforcement of Permanent Controls, providing ongoing risk & controls self-assessment status of the control environment.
• Contribute all relevant management information(KPIs/KRIs) to the various scope reports/dashboards.
• Assist with Historical Incident management process, including liaising with various stakeholders involved, root cause analysis and impact evaluation.

Contributing Responsibilities

• Contribute to the upkeep and maintenance of the ISPL Permanent Control Framework
• Maintaining relevant Operational Permanent Control (OPC IT) processes and procedures

Technical & Behavioral Competencies

• Good knowledge of IT Risk & Audit domain with focus on Internal and/or External Audits.
• Good understanding of IT Controls Framework and experience executing controls.
• Understanding of IT Software, IT Infrastructure and IT Service Management domain is a value add.
• Strong analysis & problem-solving skills
• Structured and methodical mindset
• Proactive approach with a strong ability to work on own initiative
• Ownership of work and commitment to delivery
• Can do attitude
• Team oriented (both local and global)
• Good interpersonal and communication skills
• Big picture awareness – make relationships between tactical issues and strategic options
• Client focused
• Pragmatic and creative approach

Specific Qualifications:

IT Background

Technical Skills:

• Technology Risk & Controls
• IT Risk Framework and Standards
• ISO 27001 Certified
• Understanding of key regulations

Behavioral Skills:

• Attention to Detail/rigor
• Communication skills – Oral & Written
• Personal Impact / Ability to influence
• Critical thinking

Education Level:

Bachelors / Masters

Location:

Mumbai/Chennai