Information Security Risk Manager

Crédit Agricole SA; Asia; On-site; PEN 107,000 - 195,000; Full time

Job summary

Crédit Agricole CIB is seeking an experienced Information Security Risk Manager to strengthen our IS risk management and control environment in Mumbai. You will manage regulatory audits, track recommendations, and collaborate with global teams to implement IS risk initiatives.

A strong BFSI background and RBI regulatory knowledge are preferred. The role requires 6–10 years of experience with certifications such as CRISC, CISA, ISO 27001 Lead Auditor/Implementer, and related frameworks.

Qualifications

• 8+ years of professional experience in information security or related fields.
• Experience handling regulatory/regulatory audits (RBI preferred) and closing audit recommendations.

Responsibilities

• Contribute to the development and maintenance of a robust Information Security Risk management framework including Cyber Security, ensuring alignment with regulatory requirements.
• Coordinate tracking and closure of risk recommendations from audits, assessments and risk reviews.

Skills

Communication

Analytical thinking

Proactive

Multitasking

Tech proficiency

Education

B.Tech/B.E. or B.Sc in CS

CRISC

CISA

ISO 27001 Lead Auditor/Implementer

ISO 31000

COBIT

ITIL

Job description

An experienced Information Security Risk Manager to strengthen our IS Risk management and control environment. The candidate shall also be responsible for managing audits and ensuring timely compliance including tracking of audit recommendations/findings. The ideal candidate must possess strong IS Risk management experience, preferably within the BFSI sector.

Supplementary Information

Key Responsibilities

• Contribute to the development and maintenance of a robust Information Security Risk management framework including Cyber Security, ensuring alignment with legal entity regulatory requirements for CACIB India.
• Handling regulatory (primarily Reserve Bank of India) internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders across the globe.
• Coordinate tracking and closure of risk recommendations arising from audits, assessments,& risk reviews, ensuring timely remediation and escalation where necessary.
• Engage with multiple stakeholders, including global teams, to ensure effective implementation of IS Risk management initiatives.
• Establish and ensure implementation of IS Risk policies, procedures, and standards across the organization.
• Perform risk-based deep dives to identify IS Risks, validate root causes for IS-related events, and recommend corrective actions
• Stay abreast of changes in Indian regulations pertaining to Information Security Risk Management and elevate relevant updates to Head Office (HO) as applicable.
• Participate in and contribute to the implementation of the global control plan.
• Assess and control the Information Security implications of local changes to processes or systems, ensuring adherence to group policies by coordinating with relevant stakeholders.
• Assist CISO in implementing and maintaining security controls across the organization.

Geographical area

Asia, India

City

MUMBAI

Bachelor Degree / BSc Degree or equivalent

Education Qualification

Bachelor of Technology (B.Tech) or Bachelor of Engineering (B.E.) OR Bachelor of Science in Computer Science (B.Sc. Computers)

Preferred Certifications

CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor), ISO 27001 Lead Auditor/Implementer, ISO 31000 Risk Management, COBIT (Control Objectives for Information and Related Technologies), ITIL (Information Technology Infrastructure Library)

Level of minimal experience

6-10 years

Experience

• Minimum 8 years of professional experience in Information Security or related fields, preferably within the BFSI domain.
• Prior experience in handling audits- regulatory (preferably, Reserve Bank of India), internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders including IT, preferably across the globe.
• Strong understanding of the Banking regulatory landscape in India.
• Strong Information Security background with knowledge across various domains such as Network Security, Data Security, Security Operations Center (SOC), etc.
• Prior experience engaging with multiple stakeholders, preferably across global entities.
• Hands-on experience working with IT teams on information security projects.
• Experience in coordinating and tracking recommendations from audits, assessments, and risk reviews to ensure timely closure.

Required skills

• Communication: Excellent interpersonal and communication skills in English (written and spoken) to effectively communicate at all organizational levels, from staff to senior management.
• Analytical Thinking: Strong rational, critical thinking, and reasoning skills.
• Proactive & Motivated: Self-driven with excellent people skills and the ability to work collaboratively.
• Multitasking: Ability to multitask and quickly learn about diverse subjects.
• Technical Proficiency: Advanced user of Microsoft Office tools (Excel, Word, PowerPoint).

Technical skills required

• Solid understanding of IS Risk and control frameworks (certifications such as COBIT, ISO 27001, ISO 31000, ITIL, or equivalent are highly preferred).
• Knowledge of IT networks, ISO Controls, NIST framework for IT security, and cyber security controls.
• In-depth knowledge of banking systems, Information System general architecture, and various IT actors (support teams, development teams, etc.).

General information

Entity

About Crédit Agricole Corporate and Investment Bank (Crédit Agricole CIB) Crédit Agricole CIB is the corporate and investment bank of the Crédit Agricole group, the 10th largest banking group in the world *. We support major companies and financial institutions in their development and the financing of their projects. As pioneers in responsible finance, social and environmental commitments are at the heart of our activities. Joining our teams means working in a multicultural environment, both dynamic and stimulating, where you will contribute to developing a sustainable economy. We support employees throughout their journey: you will develop your skills and access various mobility opportunities among the diversity of our businesses in more than 30 international locations. Our culture is built on collaboration, innovation and openness, where everyone is valued and empowered. By working every day in the interest of society, Crédit Agricole CIB aligns with the Group values committed to diversity and inclusion and placing people at the heart of all its transformations. All our jobs are open to people with disabilities. We welcome applications from candidates of all backgrounds and experiences. Ready to take part in our mission ? *By balance sheet size - The Banker, Juillet 2025