Specialist - IT Risk Management

Marsh McLennan is seeking candidates for the following position based in the Noida/Gurgaon office:

Senior Manager - IT Risk Management

A great opportunity has arisen for a talented Junior/Senior Cyber and IT Risk Analyst to join MMC Technologies team. We provide 1st (1.5) Line of Defence challenge and oversight of the risks being managed by technology and cybersecurity partners. We are looking for a multi-disciplined forward-looking technologist and risk analyst with diverse background and experiences in technology operations and risk management.

You will be familiar with Operational and Technology Risk Management processes and the measurement of Risk. You will play a key role in the oversight of technology Risk and will use give guidance to risk owners in the management and reporting of how they are managing their risks. The role requires confident self-starters who can understand program objectives, understand mitigating cybersecurity controls using an analytical approach to independently assess the control environment.

Your role is to support the delivery of MMCs Cyber and IT Risk Management Framework (CITRMF) across Mercer. The CITRMF underpins the management of Risk across MMC, helps ensure resources are appropriately allocated and is used to help determine regulatory capital requirements and impairment provisions in our regulated businesses. 

The successful candidate will interact with the senior management teams on matters relating to the management, oversight and reporting of Cyber and IT Risks.

We will rely on you to:

• Work with a team of first line Technology and Risk professionals in MMC Technology who responsible for overseeing, monitoring, reporting and advising the business on in respect of the following areas:
• Non-compliance with policies, procedures and/or standards.
• errors and operating events,
• third party oversight governance and areas of non compliance with policies etc.,
• supporting the Risk Management Framework including Risk Management Policy, Risk Register and related risk monitoring plan.
• Assist in monitoring technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices
• Collaborate with stakeholders to develop and implement risk mitigation strategies, controls, and action plans for technology-aligned processes
• Monitor and evaluate the effectiveness of implemented controls, contribute to the recommendations for improvements and addressing gaps in risk management
• Communicate risk-related findings and updates to relevant stakeholders, ensuring alignment with organizational objectives and risk appetite
• Work with individual lines of business and support functions to mitigate, manage and monitor technology and cyber security risks across the organisation.
• Provide support to other risk related regulatory requirements.

Role:

Risk management:

• Provide hands-on support and collaborate with internal stakeholders to ensure risks are identified, documented, mitigated and managed,
• Coordinate the proactive validation of submitted risks to manage risk and facilitate continuous improvement within processes and controls,
• Conducting preparatory work for assignments, including obtain information to better understand the scope and processes subject to analysis,
• Report periodic management information to committees, including risk metrics and dashboards.

Maintain registers:

• Maintain registers for operational resilience and third-party management,
• Collaborate with the business to ensure the data is accurate and up-to-date,
• Regularly review and validate the data to ensure completeness and accuracy.

What we will be looking for:

• Bachelor's degree in a relevant field (e.g., Risk Management, Finance, Business Administration).
• Relevant experience of Risk and Control oversight or experience in maintaining registers and logs for operational resilience, third-party management, or operating events.
• Experience in risk analysis and internal controls, including the setting of control objectives and control procedures to be put in place.
• Experience in the field of audits of general controls or related field.
• Experience in risk analysis, risk control self-assessments (RCSAs) including testing of internal controls and reporting on output.
• Proven ability to perform multiple tasks in a dynamic and changing environment.
• Superior abilities for analysis, conceptualization and problem solving.
• Ability to prioritize, supervise projects and solve problems.
• Proven organisational skills with an ability to manage multiple tasks and projects.
• A highly detail-oriented professional.
• An interest in understanding a problem and analytical and problem-solving skills.
• Interest in gaining a broad view of a business with experience in interacting with stakeholders across functional and geographic boundaries.
• Knowledge of investment management business and regulatory environments a distinct advantage.
• Self-starter with energy, tenacity, resilience and ability to deliver outcomes.
• Technology skills at a minimum proficiency required in Word, Excel and PowerPoint.

What makes you stand out:

• Enterprise Operational Risk experience particularly advantageous.
• A current role in the Risk, Audit or Compliance group of a regulatory advisory firm would be valued.

Why join our team:

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can collaborate with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities.

Marsh McLennan (NYSE: MMC) is the worlds leading professional services firm in the areas of risk, strategy and people. The Companys more than 85,000 colleagues advise clients in over 130 countries. With annual revenue of $23 billion, Marsh McLennan helps clients navigate an increasingly dynamic and complex environment through four market-leading businesses. Marsh provides data-driven risk advisory services and insurance solutions to commercial and consumer clients. Guy Carpenter develops advanced risk, reinsurance and capital strategies that help clients grow profitably and pursue emerging opportunities. Mercer delivers advice and technology-driven solutions that help organizations redefine the world of work, reshape retirement and investment outcomes, and unlock health and well being for a changing workforce. Oliver Wyman serves as a critical strategic, economic and brand advisor to private sector and governmental clients. For more information, visit marshmclennan.com, or follow us on LinkedIn and X.

Marsh McLennan is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh McLennan is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh McLennan colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one anchor day per week on which their full team will be together in person.