Company Overview :

Protiviti India Member Private Limited is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders confidently face the future. We provide consulting services in internal audit, risk, business performance improvement, and technology. We serve a wide range of clients across various industries, helping them improve operational and financial performance, leverage technology, and enhance governance, risk, and compliance.

Role Overview :

The Information Risk Management Manager/Senior Manager role is responsible for leading and executing IT risk management engagements for Protiviti's clients. This role involves assessing IT risks, developing and implementing risk mitigation strategies, and ensuring compliance with relevant regulations and standards. The individual will work closely with clients' IT and business teams, as well as internal Protiviti teams, to deliver high-quality risk management solutions that protect clients' information assets and support their business objectives. This role directly impacts the security posture and operational resilience of our clients by identifying and addressing critical IT risks.

Key Responsibilities :

- Lead IT risk assessments for clients, identifying vulnerabilities and potential threats to their information assets.

- Develop and implement risk mitigation strategies and controls to address identified risks, improving clients' overall security posture.

- Evaluate and improve clients' IT governance frameworks based on industry best practices such as COBIT, enhancing their IT management capabilities.

- Conduct compliance reviews against relevant regulations and standards (e.g., ISO 27001, PCI DSS), ensuring clients meet their regulatory obligations.

- Manage and mentor junior team members, fostering their professional development and contributing to the growth of the IT Risk Management practice.

- Develop and deliver presentations and reports to clients, communicating risk assessment findings and recommendations effectively.

- Support business development activities by identifying and pursuing new opportunities to provide IT risk management services to clients, expanding Protiviti's market presence.

- Stay abreast of emerging IT risks and security threats, providing thought leadership and insights to clients and the internal team.

Required Skillset :

- Demonstrated ability to conduct comprehensive IT risk assessments and develop effective mitigation strategies.

- Proven expertise in IT governance frameworks, particularly COBIT, and their application in real-world scenarios.

- Strong understanding of information security principles and practices, with the ability to apply them to various IT environments.

- Excellent communication and presentation skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.

- Experience in managing and mentoring teams, fostering a collaborative and high-performance work environment.

- Relevant certifications such as CISM are highly desirable.

- Bachelor's or Master's degree in Computer Science, Information Systems, or a related field.

- Adaptable to a consulting environment, including travel to client locations as needed.