NFRM Information Security & Technology Risk Specialist, AS

Job Title: NFRM Information Security & Technology Risk Specialist

Location: Mumbai, India

Corporate Title: Associate

Role Description

• An Information Technology & Security Risk Specialist to join the 2nd LoD Information Security & Technology Risk Team. The team is global, this role is within the Mumbai team (currently 1 person) which is being built out to support the global team. Should have a proven depth of knowledge and keen interest of Information Security and Technology and their application in large financial institutions.
• Working with other team members the role will input subject matter expertise and drive innovative approaches in applying risk management in an evolving threat environment. The team has a global footprint in Frankfurt, Singapore, London, Mumbai and USA.

Your key responsibilities

• Provide data and analytics reporting to support the team in monitoring the Information Security and Technology Risk Appetite, breaches and remediation.
• Where required support the implementation of automated data and analytics reporting process.
• Support the team delivery of Non-Financial Risk Management (NFRM) priorities such as risk & control assessments, scenario analysis, risk appetite.
• Monitor and challenge 1LOD Risk and Control Assessments (including results of 1LOD control testing/assurance).
• Perform 2LOD control assurance through targeted reviews of areas of concern.
• Gain an understanding and be able to articulate key Information Security and Technology regulatory requirements across APAC/MEA and their impact and implementation into the Information Security and Technology Risk Framework.

Your skills and experience

• University degree (Computer Science, Business Administration or equivalent).
• Majors in Information Security and / or Risk Management are a plus.
• Experience (5+ years) in Information Security or Information Technology with experience in the Finance industry and/or a major Technology or Consultancy company preferred.
• Experience in IT Risk Frameworks such COBIT 2019 is ideal
• 3+ yrs Understanding and experience of technology from either a support, development or business analysis perspective
• Some level of technical understanding and training either as a data analyst, developer, business analyst or project manager are a plus.
• Knowledge of Information Security and Technology industry regulatory standards and/or Risk Frameworks (e.g. EBA Guidelines ISO / 27000 Series, COBIT 2019, DORA) are a plus.
• Experience of technology coding e.g python, java is a plus
• Understanding of IT controls: SDLC, managing technology obsolescence, disaster recovery is a plus
• Knowledge of Digital transformation, Private and Public Cloud, AI tooling a plus
• Relevant professional certifications e.g. CISSP, CISA, CISM, CRISC, ITIL, ISO27001 Lead Auditor or similar are a plus.
• Experience of working in large global teams yet comfortable working independently without day-to-day oversight and steer.
• Strong communication skills (English required).