Job Description

As part of our Technology Risk team, you will be performing IT assessments (IT General Controls and IT Application Control testing). Working with Technology Risk team, you will also perform/ provide insights to IT Risk assessment, IT Governance, ERP reviews, Application control reviews, Cybersecurity reviews and conduct maturity assessment on the current IT posture.

• Prior experience in assessment, monitoring and reporting of the below technology risk domains (minimum 4 domains): -

• IT Risk Assessments
• System Acquisition & Lifecycle Management
• Problem Management (Change Management, IT Incident Management, Patch Management etc.)
• Resilience (BCP, DR, Backup & Recovery)
• Identity & Access Management
• Physical & Environmental Controls
• Third Party Management
• Capacity Management
• Logging and Monitoring

• Conduct technology reviews (performance, capacity, change etc.) and design reviews of new applications/enhancement in existing applications, APIs, infrastructure and identify design gaps.
• Provide recommendations for identifying and measuring key control indicators and key performance indicators in technology domains to assess and review performance of critical systems and applications.
• Prepare dashboards for management review.
• Review technical incidents and discuss and conclude root-cause ananlysis (RCA). Provide recommendation or suggestion to product/application team to avoid recurrence of the incident.
• Help verify the risks identified by IT stakeholders through self-assessment and discuss the findings with the internal stakeholders.
• Timely follow-up of open issues and observations flagged by internal audit, external audit, and regulators
• Identify technology risk on an ongoing basis for existing and new processes and products, or changes contemplated to existing products and processes.

• Bachelor’s degree in any discipline.
• 8-12 years work experience in IT risk management.
• Minimum 5 years experience in Application design reviews.
• 4-5 years experience of BFSI Industry would be preferred.
• Knowledge of ITIL, ITSM, ISO27001, CoBIT, ITIL V3 would be preferable
• Knowledge of cloud services and cloud security controls would be preferable.
• Excellent communication skills (written and verbal) with an ability to explain complex topics to both technical and non-technical audiences
• Good analytical and presentation skills.