Sr. Manager - IT, Risk Assessment

Job Summary: The Senior Manager of Risk is responsible for leading the risk management team in identifying, assessing, and mitigating risks to the organization. This role involves developing and implementing risk management strategies, policies, and procedures to protect the organization's assets and ensure compliance with regulatory requirements.

Key Responsibilities:

Risk Assessment and Analysis:

• Conduct comprehensive risk assessments to identify potential threats and vulnerabilities.
• Analyze risk data and trends to develop actionable insights and recommendations.
• Develop processes to quantify and report risk to senior management

Risk Mitigation and Control:

• Develop and implement risk mitigation strategies and controls.
• Monitor the effectiveness of risk management measures and adjust as necessary.

Policy Development:

• Create and update risk management policies and procedures.
• Ensure policies are in compliance with relevant regulations and industry standards.

Incident Response:

• Lead the development and execution of incident response plans.
• Coordinate with internal and external stakeholders during incidents to ensure effective resolution.

Reporting and Communication:

• Develop risk metrics and risk reports to senior management.
• Communicate risk management activities and outcomes to stakeholders.
• Work with various business units to ensure risks are tracked and aggregated reporting is managed.

Team Leadership:

• Manage and mentor the risk management team.
• Foster a culture of risk awareness and continuous improvement within the organization.

Compliance and Audit:

• Ensure compliance with regulatory requirements and internal policies.
• Coordinate with auditors and regulatory bodies during assessments and audits.

Qualifications:

• Bachelor's degree in Risk Management, IT or a related field.
• Professional certifications like CISM, CRISC, CRM etc.
• Minimum of 15 years of experience in risk management, with at least 5 years in a leadership role.
• Strong knowledge of risk management principles, practices, and regulatory requirements.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills.
• Ability to lead and motivate a team.

Preferred Skills:

• Experience with risk management software and tools, including ServiceNow
• Risk Quantification
• Deep understanding of IT and cyber risk management frameworks like ISO 27001, NIST CSF and related.
• Strong project management skills.

Working Conditions:

• Full-time position.
• Occasional travel may be required.