Manager

Hi,

We are currently looking for early joiners for QRC role. If you have the relevant experience, please share your CV with below details at somparna.deb@pwc.com

• Total Experience
• Relevant Experience
• Current CTC
• Expected CTC
• Notice Period

Job Summary: The Manager Risk & compliance provides support to the QRC Leader and provides expertise and execution, monitoring, reporting, Gap analysis, Internal Audits etc. in Risk management and compliance related activities for Technology function for ACs in India and other ACs as appropriate. 

Roles and Responsibilities:   

1. QRC Apex Manual: Supports the QRC Leader in the development and maintenance of a Technology wide quality assurance program inclusive of all Technology towers and staff, develops and maintains a QRC Apex Manual and related QRC planning, Implementation, Monitoring and control activities and annual evaluation of the plans effectiveness. 
2. Technology Governance: Manages the weekly Operations meetings, Actions tracking, MOM and Deck communication to the relevant stakeholders. Ensures electronic storage of QRC and governance reports and communications to promote ongoing access for key Stakeholders and for Audit and compliance requirements. 
3. InfoSec Risk Management: Develops and maintains policies and procedures related to the Technology risk management program. Oversees a ACs in India Technology wide risk management program, develops and maintains a written Technology risk management plan, Risk register creation, review and updation as well as maintenance and annual evaluation of the plans effectiveness. 
4. QMSE Risk management: Represents technology team during the QMSE risk reviews, review of Risk mitigation plans, controls established, and support provided in this initiative. Also maintains the Business processes, Risk controls and Risk mitigations and related artifacts. 
5. ERM Risk management: Represents technology team during the ERM risk reviews, review of Risk mitigation plans, controls established, and support provided in this initiative. 
6. OFRO Risk management: Represents technology team during the OFRO risk reviews, review of Risk mitigation plans, controls established, and support provided in this initiative. 
7. Annual ISP compliance: Oversees an annual ISP compliance program, ensures that all required elements of a compliance program/assessment are addressed. This includes identification of stakeholders, setting up the right expectations, collating the supplied evidence, reviewing the evidence, uploading them in appropriate folders, validation of evidence in Archer and completing the assessment in time. Reporting out any audit findings to the Technology leadership, driving mitigation plans and mitigation actions and getting the findings closed in Archer tool. 
8. NIS Roles and responsibilities: Work in the capacity of local Technology SPOC for the NIS role which includes Security assessment and approvals for ID creation for 3rd party; Guidance on containment process for laptop and mobile lost cases and approval to take mobile at the service center for repairing. Approvals to re-enable IDs post containment process completion.; Security review/ Blanco Data Wipe report review and approval for laptops and Mobile Phones handover to vendors; Follow Up and closing of Security Incident (SIT); Coordination and providing support for all internal audits; Vendor laptop entry approval; Quarterly user headcount reconciliation activity; SP compliance Assessment evidence uploading in Archer; Six monthly USB Reconciliation Audit and related actions. 
9. Audits & Compliance: Supports the QRC Leader in the as a resource for all external and internal compliance audits including standards certifications Audits, Customer Audits, Internal Audits etc. ensures that corrective action plans are documented in a timely manner and effectively implemented. 
10. Security Incident Management: Supports the QRC Leader in the investigations relating to reports of known or suspected violations of the ISP compliance program, ISP policy and related controls. In consultation with the CIO, submits mandatory reports of known or suspected compliance violations to the appropriate internal functions. Helps the internal functions during the information security related incidents, its investigations, containment actions and related reports and auditable evidence. 
11. AC Certification Program: Supports the QRC Leader in the Technology function in the Global ACs certification program and support the other global ACs in their journey in various certification programs. 
12. Knowledge Management: Supports the QRC Leader in the development and maintenance of up-to-date knowledge of Technology compliance requirements and related Policies and regulations as mandated or recommended by other internal functions, attends outside corporate compliance trainings provided by External QRC specific agencies and/or other agencies as directed by the QRC Leader/Director/CIO. 
13. Any other duties: Duties as assigned by the QRC Leader, Director, MD & CIO -Technology in Quality Assurance, Risk management and compliance related activities. 

Qualifications: 

• Batchelors /Master’s degree in any of the fields from recognized college/University with 10-12 years’ experience in the in-Quality Assurance, Risk management and compliance related activities. 
• Strong knowledge of Quality Assurance, Risk management and compliance related standards, policies, processes, and activities which are driven in Technology function for ACs in India  
• Certification standards like ISO27001:2022, ISO9001, Certified Lead Auditor/Implementer, Knowledge of ITSMS, BCMS, ERM, CMMi-SVC, CMMi-DEV, COPC, SOC 1 & 2 etc. 

Techno-Functional Skills Required: 

• Excellent oral and written communication skills. 
• Working knowledge of Service Now ITSM module and ITIL practices 
• Conversant in Agile and Scrum framework. 
• Computer skills and knowledge of applicable software programs/Tools used in the Quality Assurance, Risk management and compliance related activities 
• Skills in Power Point, Word, Excel. Power BI, Python or any Data analytics/Data intelligence tools knowledge would be added advantage. 
• Ability to work with diverse teams, cross functional teams and diverse geographic populations.