Operational Risk Manager

Airtel; United States; Presencial; USD 120 000 - 160 000; Tempo integral

Resumo da oferta

Airtel is seeking a technology risk professional to lead risk and controls assessments across IT domains and help implement robust technology controls. You will collaborate with IT partners to manage risk in projects, including TPRM, ISO 22301, and regulatory requirements, while engaging stakeholders to close control gaps.

Responsibilities include conducting risk assessments, developing policies, reporting to senior management, and ensuring proper escalation and resolution of issues related to

Qualificações

• Bachelor's degree in Computer Science, Information Technology, Risk Management, or related field.
• Master's degree or professional certifications (CISA, CRISC, CISSP) are a plus.

Responsabilidades

• Proven experience in technology risk management and policy development.
• Conduct regular risk assessments across IT infrastructure and services including access, capacity, change, patch, data migration, cloud, cryptographic, physical and environmental controls, networks, databases, and VAPT.
• Collaborate with IT teams to ensure security controls are effectively implemented.
• Stay up to date on emerging technology risks and regulatory requirements.
• Prepare and present reports on technology risk management to senior management and stakeholders.
• Develop security requirements and oversee the implementation of security controls.
• Perform thematic reviews on products, apps and technology/platform services and report findings with management action plans.
• Monitor key risk indicators and escalate breaches or concerns related to Technology, BCMS, Third-Party Risk and Cyber Security.
• Understand outsourcing/third-party vendor risk regulatory requirements and conduct vendor risk assessments including cyber security frameworks.
• Understand RBI, CSITE and related regulatory requirements applicable to Technology, BCMS, Cyber Security and third-party vendors.

Conhecimentos

Technology risk management

Regulatory compliance

Vulnerability & risk assessments

BCMS awareness

ISO 27001 understanding

Formação académica

Bachelor's degree in Computer Science/IT/Risk Management

Master's degree or professional certifications (CISA, CRISC, CISSP)

Ferramentas

PCI DSS

GDPR

Descrição da oferta de emprego

Thecandidate will be responsible for conducting risk and controls assessmentsacross various technology domains and ensuring the implementation of technologycontrols. They will collaborate with IT Partners lead technology-relatedprojects from a risk perspective,TPRM including ISO22301, and will engage withstakeholders to design controls and assess control maturity and gaps.Additionally, the candidate will partner with risk, compliance, and audit teamsto address technology control-related issues, ensuring proper resolution,escalation, and reporting procedures are followed. Their focus will be onenhancing control awareness and effectively managing risks within the globalinformation technology organization.

Roles& Responsibilities

• Proven experience in technologyrisk management, preferably in a financial service or regulated industry& develop and implement technology risk management strategies andpolicies.
• Conduct regular risk assessments,monitoring of Informational Technology (IT) Infrastructure & ServiceManagement (including access management, capacity management, change &patch management, data migration controls, cloud computing services, cryptographiccontrols, physical & environmental controls, Network, database,metrics, VAPT, identity management, and others), identifying potentialvulnerabilities.
• Collaborate with IT teams toensure that security controls and measures are effectively implemented.
• Stay up to date on emergingtechnology risks and regulatory requirements.
• Prepare and present reports ontechnology risk management activities to senior management andstakeholders
• Developing security requirementsand guidelines, and overseeing the implementation of security controls
• Perform Thematic Reviews on Bank’s Products, Applications andTechnology/Platform services in accordance with Risk calendar plan andreport the findings along with management action plan & recommendation
• Monitor operational Key riskindicators (KRI’s) and escalate any potential breaches or concerns relatedto Technology, BCMS, Third Party Risk and Cyber Security domains
• Understanding of Outsourcing& Third-party Vendor risk related regulatory requirements and risksassociated with outsourcing of services by Payments Bank to Third Partyvendor and possessing experience in conducting Third party Vendor riskassessments including cyber security framework and related risk
• Understanding of ISO 22301 BCPrequirements and support the BIA assessment and development of BCMS andcrisis management plan
• Understanding of RBI and CSITEetc. and related regulatory requirements applicable on Technology, BCMS,Cyber security & Third-party vendors

Education

• Bachelor's degree in ComputerScience, Information Technology, Risk Management, or a related field.Master's degree or professional certifications (e.g., CISA, CRISC, CISSP)are a plus.
• Strong understanding of ITsystems, cybersecurity principles, and risk assessment methodologies.
• Familiarity with regulatoryrequirements such as GDPR, PCI DSS, ISO 27001, and other relevantstandards.