Senior IT Risk Management Consultant

EY; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

EY in India is seeking an experienced GRC Archer Developer with 5-9 years of hands-on experience in designing, developing, and supporting RSA Archer solutions. The ideal candidate should understand GRC processes, the Archer data model, and end-to-end configuration of use cases, with familiarity of other GRC tools like SNOW and OpenPages.

You'll lead IT Risk Management projects, mentor teammates, coordinate deliverables, and travel to client sites as needed, while delivering clear communication

Qualifications

• 5-9 years of IT Security / Cyber Security / GRC experience with Archer
• Strong knowledge of GRC processes, Archer data model and use-case config
• Familiarity with other GRC tools like SNOW, IBM OpenPages, ProcessUnity

Responsibilities

• Act as team lead within IT Risk Management (ITRM) projects
• Maintain transparency in communication, highlight risks and mitigation plans
• Visualize solutions based on customer requirements and propose designs
• Prepare reports and schedules for clients and stakeholders
• Develop and maintain productive client relationships and monitor deliverables
• Mentor project resources and provide status updates to managers
• Travel to customer locations or EY offices as needed
• Demonstrate strong documentation and communication skills

Skills

GRC Archer

IT Security

Risk Management

Leadership

Stakeholder Management

Education

BE/BTech in Computer Science or related

Tools

RSA Archer

ServiceNow (SNOW)

IBM OpenPages

ProcessUnity

Job description

Job Summary

The Opportunity: We are seeking an experienced GRC Archer Developer with 35 years of hands on experience in designing, developing, and supporting RSA Archer solutions. The ideal candidate should have a strong understanding of GRC processes, the Archer data model, and end to end configuration of use cases. Experience with other GRC tools like SNOW, IBM OpenPages, and ProcessUnity will be considered a strong advantage.

Your Key Responsibilities

• Ability to work as a team lead within IT Risk Management (ITRM) projects
• Right attitude towards teaming, ownership, and knowledge sharing
• Work back with the project team to maintain transparency in communication, highlight risks and share mitigation plan
• Ability to visualise and propose solutions to customers based on the requirements shared
• Help prepare reports and schedules that will be delivered to clients and other parties
• Develop and maintain productive working relationships with client personnel
• Planning and monitoring of the project deliverables for the team
• Mentor the project team in executing the project deliverables
• Regular status reporting to the project manager and onsite coordinators
• Demonstrate flexibility to travel to the customer locations / other EY offices, on need basis
• Good documentation and communication skills

People responsibilities

• Conduct performance reviews and contribute to performance feedback for the team
• Foster teamwork, quality culture and lead by example.
• Understand and follow workplace policies and procedures
• Train and mentor the project resources and team members

Skills and attributes for success

• 5-9 years of experience in the field of IT Security / Information Security / Cyber Security / Cloud Security
• Experience in IT Audits, IT General Controls, IT Attestation (SOC1/SOC2 Reporting), SOX-ITGC, etc.
• Experience in working with IT Risk Management frameworks to identify, analyse, mitigate, monitor and communicate IT risks
• Conduct risk assessments for process, applications, network infrastructure assets, and vendors
• Draft IT/Cyber risk assessment reports including findings, associated risks and recommendations
• Develop Key Risk Indicators (KRIs) and creating dashboards for continuous monitoring of the risks
• Experience in conducting IT controls validation and testing, and identifying control deficiencies
• Develop IT / Information security policies, standards and procedures
• Experience in working with leading industry standards such as NIST-CSF, ISO27001, ITIL, COBIT, PCI-DSS, CSA-CCM, CCSK, ISO27017, etc.
• Experience working on various cloud platforms such as Azure, AWS, GCP, etc. would be a plus
• Well versed with the security design concepts and should be able to drive discussions for IT risk management along with the customer

Good to Have (Preferred Qualifications)

• Experience in conducting awareness training and workshops on IT Risk Management
• Demonstrated track record with a consulting organization and/or a blue-chip organization
• Demonstrated experience in delivery of engagements and client management
• Relevant professional qualifications such as CA, MBA, MCA, MS
• B.E/B.Tech (Electronics, Electronics & Telecommunications, Comp. Science)/MBA/M.Sc. having experience with other Big3 or panelled IT/ ITeS companies.

Certifications (Preferred)

• Relevant professional certifications such as CISA, CISSP, CRISC, ISO27001, ITIL, COBIT, etc.
• Certifications in Cloud platforms such as Azure, AWS, GCP, etc.

Soft Skills

• Strong communication and stakeholder management skills.
• Ability to work independently as well as in cross functional teams.