Risk Management - Officer/Manager

Gostravvy; Ahmedabad District; Presencial; INR 1.800.000 - 2.800.000; Jornada completa

Descripción de la vacante

Gostravvy is seeking a seasoned Risk Manager to implement Risk Management Policy, ISMS risk aspects, Business Continuity Policy, and Data Privacy Policy while ensuring compliance across the organisation. You will monitor risk levels in IT, operations and other areas, periodically review risk appetite and the management framework, and prepare quarterly risk maps and annual risk reports.

The role requires developing risk assessment frameworks, collecting departmental data for risk reporting,

Formación

• Experience in Risk Management function and audits/compliance.
• Exposure in banking/financial institutions preferred.
• Knowledge of risk management principles and concepts.

Responsabilidades

• Effective implementation of risk policies and ISMS risk aspects.
• Identify, assess, mitigate and review risks in IT and operations.
• Monitor risk levels and review risk appetite and framework.
• Prepare quarterly risk maps and annual risk reports.
• Develop risk assessment frameworks and monitor risk controls.
• Collect data for risk reporting and MIS; update training material.
• Coordinate with IT, SOC and business units for remediation.

Conocimientos

Risk Management

Audits/Compliance

ISO 27001

IT Security

Cyber Security

Data Privacy laws

Fintech awareness

Educación

BE/B.Tech or equivalent

Descripción del empleo

Direct Responsibilities:

• Eective implementation of Risk Management Policy & Risk Aspects of ISMS Policies,

  Business Continuity Policy, Data Privacy Policy, & other related policies of the company and

  compliance/monitoring the same.

• Identify, Assess, Measure, Mitigate and Review Risks in IT, Operations and other functional

  Areas of the company.

• Continuously monitor and control the level of risk in the Company.

• Periodical review of the Risk Appetite, Risk Management Framework and Risk Management

  Policy.

• Prepare a risk map, of the Company at least on a quarterly basis and an annual risk

  management report.

• Develop a risk assessment framework to identify, assess, mitigate, and monitor risks.

• Collect reports and/or information from the departments and employees of the Company

  for Risk Assessment, Risk Reporting & MIS.

• Prepare and regularly review and update the risk training and testing material taking into

  account the most common risk sources.

• Ensure the information on the identified risk factors, risk changes, etc. is passed to the

  Management/ Enterprise Risk Management Committee in a timely manner.

• Assess the eectiveness of the use of the risk limits.

• Prepare, implement and oversee Companys risk management documents (procedures,

  policies, strategies, registers etc.)

• Seek to ensure eective functioning of the Risk Management System, promote risk

  awareness and management.

• Provide guidance to the employees as much as it is related to the identification,

  management and elimination of risks

• Review/Monitor the Risk Assessments on new and existing applications to ensure strong

  risk management strategies, tools, frameworks and standards are in place.

• Coordinate with IT, SOC and business function to drive risk assessment and remediation.

• Prepare RISK and Related Agenda Notes to the Enterprise Risk Management

  Committee/Risk Management Committee of the Board/Board and other committees.

Contributing Responsibilities:

• Coordinate & Assist: IT-Internal Audits, ISO 27001 & other ISO Certification Audits, SOC

  Audits, UIDAI IS AUDIT and other related Audits.

• Coordinate & assist in preparation/review of documentation, process & procedure for ISO

  certifications like ISO 27001, ISO 22301, ISO 27701

• Assist in preparing and monitoring IT compliance check list, UIDAI Self-Assessment etc.

• Must be motivated, and able to work independently as well as part of a team and must

  demonstrate ethical responsibility, maturity, and discretion.

Technical & Behavioural Competencies:

• Knowledge of Risk Management Principles/Concepts.

• Must have demonstrable previous experience in Risk Management function/

  Audits/Compliance. Relevant Exposure in Banking/financial institutions preferred.

• Knowledge of Risk Management Tools.

• Knowledge of the Indian financial markets, banking system and its related instruments

• Understanding /Exposure /Experience in IT Security/ Security System development, and/or

  operations. Vulnerability/ Patch Management/DevSecOps is a plus.

• Have good understanding of Information Technology/ Cyber Security, Data Privacy laws,

  rules & regulations.

• Have general knowledge on emerging technologies such as Fintech, Mobile & Virtualization.

• Analytical, problem-solving and communication skills

• Must have Good English oral and written communication. Other Indian languages should be

  highlighted.

Education Level:

• BE/B. Tech/bachelor’s degree or equivalent.

• Specialization in Risk Management/Cyber Security/Information Security/Information

  Technology preferred.