Operational Risk Manager

Job Description:-

The candidate will be responsible for conducting risk and controls assessments across various technology domains and ensuring the implementation of technology controls. They will collaborate with IT Partners lead technology-related projects from a risk perspective,TPRM including ISO22301, and will engage with stakeholders to design controls and assess control maturity and gaps. Additionally, the candidate will partner with risk, compliance, and audit teams to address technology control-related issues, ensuring proper resolution, escalation, and reporting procedures are followed. Their focus will be on enhancing control awareness and effectively managing risks within the global information technology organization.

Roles & Responsibilities:

• Proven experience in technology risk management, preferably in a financial service or regulated industry & develop and implement technology risk management strategies and policies.

• Conduct regular risk assessments, monitoring of Informational Technology (IT) Infrastructure & Service Management (including access management, capacity management, change & patch management, data migration controls, cloud computing services, cryptographic controls, physical & environmental controls, Network, database, metrics, VAPT, identity management, and others), identifying potential vulnerabilities.

• Collaborate with IT teams to ensure that security controls and measures are effectively implemented.

• Stay up to date on emerging technology risks and regulatory requirements.

• Prepare and present reports on technology risk management activities to senior management and stakeholders

• Developing security requirements and guidelines, and overseeing the implementation of security controls

• Perform Thematic Reviews on Bank’s Products, Applications and Technology/Platform services in accordance with Risk calendar plan and report the findings along with management action plan & recommendation

• Monitor operational Key risk indicators (KRI’s) and escalate any potential breaches or concerns related to Technology, BCMS, Third Party Risk and Cyber Security domains

• Understanding of Outsourcing & Third-party Vendor risk related regulatory requirements and risks associated with outsourcing of services by Payments Bank to Third Party vendor and possessing experience in conducting Third party Vendor risk assessments including cyber security framework and related risk

• Understanding of ISO 22301 BCP requirements and support the BIA assessment and development of BCMS and crisis management plan

• Understanding of RBI and CSITE etc. and related regulatory requirements applicable on Technology, BCMS, Cyber security & Third-party vendors

Education

• Bachelor's degree in Computer Science, Information Technology, Risk Management, or a related field. Master's degree or professional certifications (e.g., CISA, CRISC, CISSP) are a plus.

• Strong understanding of IT systems, cybersecurity principles, and risk assessment methodologies.

• Familiarity with regulatory requirements such as GDPR, PCI DSS, ISO 27001, and other relevant standards.