IT Risk & Control Specialist

Smart IMS Inc.; Mumbai; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Smart IMS Inc. is seeking an experienced individual in IT risk and audit, preferably with a background in Banking/FI. You will manage stakeholder communication and develop risk mitigation strategies while leading risk engagement and ensuring compliance with APAC regulations.

The role requires a Bachelor's degree in IT and a minimum of 5-7 years of relevant experience. Industry certifications such as CISA and CISM are preferred.

Qualifications

• Minimum 5-7 years of experience in IT risk/audit, preferably in Banking/FI domain.
• Industry certifications (CISA, CISM, COBIT foundation) preferred.
• Experience in leading compliance or technology audit roles.

Responsibilities

• Manage senior stakeholders communication and reporting.
• Develop and socialize potential risk mitigation strategies.
• Drive risk engagement and management; E2E risk management includes ERP, RCSA, eRIC.
• Foster a risk culture within GCIBT, leading participation in technology risk activities.

Skills

IT risk/audit experience

Leadership in risk programs

Stakeholder communication

Regulatory risk management knowledge

Education

Bachelor’s degree in IT

Tools

JIRA

Job description

• Individual with IT risk/audit experience preferably in Banking/FI domain.
• Bachelor’s degree in IT, minimum 5-7 plus years of experience, industry certifications (CISA, CISM, COBIT foundation, etc) preferred.
• Relevant experience in executing Risk initiatives within a tech risk function, compliance or technology audit role
• Experience in leading programs for proactively identifying regulatory risk exposure and potential non-compliant areas
• Knowledge of APAC regulations & understanding of regulatory risk management preferred

What you will do

• Manage senior stakeholders communication and reporting
• Develop and socialize potential risk mitigation strategies
• Drive risk engagement & management and issue identification; in particular E2E risk management includes ERP, RCSA, eRIC, SIAI, JDI, AIAI, RIAI etc.
• Drive QA (Quality Assurance) testing, Business Continuity for applications, Sustainability Program and new toolset adoption with JIRA for Risk management.
• Foster the Identify, Escalate, Debate risk culture
• Identify opportunities for enhancing or streamlining execution of risk management processes; partner across multiple divisions to execute.
• Manage regulatory relationships, where relevant
• Collaborate across the GCIBT application groups, Risk Leads and enterprise process owners (including Global Information Security) to respond to Internal and External Audits, Exams, and Regulatory/Clearing Inquiries & Assessments.
• Quality assurance and Global Information Security related findings program oversight
• Assist business and process owners with remediating the most significant risks including Audit Issues, Self-Identified Audit Issues, Compliance Identified Audit Issues, Regulatory Issues
• Practice and promote good risk culture and risk management within GCIBT, leading participation in technology risk activities.