Sr Lead - Captive Operations

Tata Communications; Mumbai; In loco; INR 1.500.000 - 2.300.000; Tempo pieno

Descrizione del lavoro

Tata Communications Limited is seeking an experienced GRC professional with strong RSA Archer expertise to manage Governance, Risk and Compliance processes. The role covers administration, configuration, workflow management, and continuous improvement of the Archer GRC platform in collaboration with Information Security, Risk, Audit and Compliance teams.

The ideal candidate will handle risk assessments, KRIs/KPIs, audit issue management, vendor risk, and reporting dashboards, while coordinating

Competenze

• Experience as a GRC professional with RSA Archer hands-on expertise.
• Strong understanding of Enterprise Risk Management and IT risk assessments.
• Ability to configure, implement, and administer Archer-based solutions.

Mansioni

• Administer and support RSA Archer GRC platform.
• Configure applications, dashboards, reports, data feeds, workflows and access controls.
• Develop and maintain Archer applications and use cases based on requirements.
• Manage ERM processes, risk registers, assessments, and remediation tracking.
• Support third-party risk management, vendor assessments, and due diligence workflows.
• Develop management dashboards and MIS for governance, risk and compliance status.
• Facilitate integration of Archer with enterprise systems via APIs and data feeds.

Conoscenze

RSA Archer

GRC

IT Risk

Cybersecurity Risk

Compliance

Audit

TPRM

Risk Assessment

Reporting Dashboard

Descrizione del lavoro

Job Description - GRC / RSA Archer Consultant

Experience: 5-6 Years

Role: GRC / RSA Archer Consultant

Archer Experience: Preferably 3 Years

Primary Skills: RSA Archer, GRC, IT Risk, Cybersecurity Risk, Compliance, Audit, TPRM, Risk Assessment, Reporting Dashboard

Role Overview

We are looking for an experienced GRC professional with strong hands-on expertise in RSA Archer to manage and support Governance, Risk, Compliance, Information Security Risk, Audit, and Regulatory Compliance processes.

The candidate will be responsible for administration, configuration, implementation, workflow management, reporting, issue resolution, and continuous improvement of the Archer GRC platform while working closely with Information Security, Risk, Audit, Compliance, IT, business teams, and external stakeholders.

Key Responsibilities

RSA Archer - Platform Administration

• Administer and support the RSA Archer GRC platform.
• Configure applications, questionnaires, dashboards, reports, data feeds, notifications, workflows, and access controls.
• Develop and maintain Archer applications and use cases based on business and regulatory requirements.
• Configure user roles, permissions, access control, and security groups.
• Troubleshoot Archer application, workflow, data, and integration-related issues.
• Perform platform health checks and coordinate with OEM/vendor for product-related issues.
• Manage application changes, enhancements, releases, and upgrades.
• Maintain Archer configuration documentation and operational procedures.

GRC Risk Management

• Support implementation and management of Enterprise Risk Management (ERM) processes.
• Manage Information Security and IT Risk assessments through Archer.
• Develop and maintain risk registers, risk assessments, risk treatment plans, and remediation tracking.
• Support identification, assessment, monitoring, and reporting of technology and cybersecurity risks.
• Define and monitor risk indicators, including KRIs and KPIs.
• Support risk acceptance, exception management, and risk remediation processes.

Audit Issue Management

• Manage internal and external audit activities using Archer.
• Configure audit engagements, control testing, observations, findings, and remediation workflows.
• Track audit issues and action plans through closure.
• Generate management dashboards and reports for audit and compliance status.
• Coordinate with control owners and stakeholders for timely closure of findings.

Third-Party / Vendor Risk Management

• Support Third-Party Risk Management (TPRM) processes using Archer.
• Configure vendor assessments, inherent risk assessments, questionnaires, and due diligence workflows.
• Track vendor risks, exceptions, remediation actions, and compliance status.
• Support periodic vendor reassessment and reporting.

Reporting Dashboard

Develop management dashboards and reports for:

• Enterprise Risk
• Cybersecurity Risk
• Compliance
• Audit
• Third-Party Risk
• Policy compliance
• Exceptions
• Remediation status
• Provide MIS and executive-level reporting to senior management.
• Analyze GRC data and identify trends, recurring issues, and areas of improvement.

Integration Automation

• Work with application, security, and infrastructure teams for integration of Archer with enterprise systems.
• Support integration through APIs, data feeds, and other available mechanisms.
• Automate repetitive GRC processes and reporting wherever possible.
• Troubleshoot data synchronization and integration issues.