Purpose of Job :

The candidate will be responsible for conducting risk and controls assessments across various technology domains and ensuring the implementation of technology controls.

Roles & Responsibilities :

- Develop and implement technology risk management strategies and policies.

- Conduct regular risk assessments of IT Infrastructure & Service Management (including access management, capacity management, change & patch management, data migration controls, cloud computing, and VAPT).

- Collaborate with IT teams to ensure security controls are effectively implemented.

- Monitor and analyze security incidents and provide recommendations for improvement.

- Prepare and present reports on technology risk management activities to senior management.

- Monitor operational Key Risk Indicators (KRIs) and escalate potential breaches related to Technology, BCMS, Third Party Risk, and Cyber Security.

- Conduct Third Party Vendor risk assessments including cyber security framework reviews.

- Support ISO 22301 BCP requirements and BIA assessments.

Tech Stack & Requirements :

- 5 to 8 years of experience in technology risk management, preferably in financial services.

- Bachelor's degree in Computer Science, IT, or Risk Management.

- Professional certifications (CISA, CRISC, CISSP) are a plus.

- Strong understanding of IT systems, cybersecurity principles, and risk assessment methodologies.

- Familiarity with regulatory requirements such as GDPR, PCI DSS, ISO 27001, and RBI guidelines.