Technology Lead - IT Risk & Compliance (8-10 yrs)

Responsibilities :

- Have primary responsibility for ensuring that appropriate and adequate security mechanisms are provided in the systems and network infrastructure shared across systems and business units.

- Be responsible for agreeing to security classification of all infrastructure components in agreement with the business owners.

- Have primary ownership to comply with specific security policies, which will be applicable for systems development and acquisition.

- Be responsible for maintenance of the various security tools and solutions.

- Be responsible for monitoring of secure status on each system and network within its control.

- Report on weaknesses or breaches of security to be made to the relevant Business owners or Infrastructure owners and to the CISO, who shall in turn co-ordinate, the incident response.

- Be responsible for undertaking regular monitoring of secure status on each system/application and network within its control.

- Report on weaknesses or breaches of security to the relevant Business Owners or Infrastructure Owners and to the CISO, who shall be responsible to manage the incident response.

- Responsible for driving end point system and server security.

- Perform Thematic review across all Technology functions.

- Act as single point of contact from IT for all kinds of audits (internal & audit).

- Ensure all artefacts are reviewed/checked before final submission to auditors.

- Ensure no HIGH risk & repeat issues coming in IT audits.

- Close co-ordination with Application, Infra & other units within Technology team.

- Ensure proper checks build & performed in order to ensure 100% compliance.

- Closely work with CISO & Risk team within organization for streamlining & implementation of policies/procedures.

- Ensure Technology risk is very well documented & reviewed at regular intervals.

- Ensure security controls are tightly implemented within Technology unit.

- Closely involved in project management activities wherever required for strategic projects.

- Perform independent post implementation review for critical initiatives.

- Ensure Compliance Self-Assessment (CSA) exercise performed regularly.

- Handle, manage & document risk register for Technology.

- Conduct Technology Risk forum along with Key Technology stakeholders.

Skills & Expertise :

- Well verse with IRDA regulations.

- Minimum 10+ years of experience in audit, handling review functions, etc.

- Having security related certifications will be added advantage.

- BE or Science graduate