S&G - Risk Management

• Share and collaborate effectively with others
• Identify and make suggestions for improvements when problems and/or opportunities arise
• Handle, manipulate and analyse data and information responsibly
• Follow risk management and compliance procedures
• Keep up-to-date with developments in the area of TPRM
• Communicate confidently in a clear, concise and articulate manner - verbally and in the materials I produce
• Build and maintain an internal and external network
• Seek opportunities to learn about how PwC works as a global network of firms
• Uphold the firms code of ethics and business conduct

Preferred Knowledge/Skills:

Demonstrates some knowledge and/or a proven record of success in:

• Executing implementation, design, and execution of third party risk related projects at a professional services firm or enterprise
• Understanding technical and operational standard industry practices involving third party risk management regulations / standards to build programs, risk assessments and business processes
• Understanding common third party risk related issues currently faced in one or more industry sectors
• Demonstrating aptitude for conducting quantitative and qualitative analyses of large and complex data

Demonstrates some abilities and/or a proven record of success in:

• Developing and implementing third party risk management programs or associated solutions
• Leveraging Microsoft Office Suite (Word, Powerpoint, Excel, Visio), Google Suite (Docs, Sheets, and Slides) and Power BI to create deliverables, proposals, and outreach materials for prospective clients
• Leveraging creative thinking, problem solving, and individual initiative
• Collaborating with clients and building relationships with clients
• Independently managing and prioritizing workload

Risk Consulting

• Experience in implementation ISO 22301 standard
• Understanding of the BCP framework components such as Business Resiliency Planning, Crisis Management Planning, Incident Response Planning, Disaster Recovery Planning, Plan Exercising/ Testing, BIAs etc.
• Strong understanding of the planning, development, program execution, maintenance and testing of Enterprise Business Continuity, Disaster Recovery, and Crisis/Incident Management programs
• Hands on experience in implementing and assessing business resiliency program for organization of various sizes and complexity.
• Should be able to support BC/ DR audit and examination activities including development and maintenance of policies, procedures and standards that are aligned with best practices (standards, frameworks) such as ISO 22301, NIST
• Should be able to understand the Enterprise Risk Management methodologies and map it to the Business Resiliency Program
• Support the identification of Business Continuity related risks (internal / external), the assessment of their likelihood, as well as potential impacts and risk mitigation plans.
• Conduct Business Impact Assessment for various business functions
• Support internal reporting and tracking of business continuity related issues and remediation activities.
• Design, coordinate and execute BCP/DR annual test exercises for critical business processes and produce test reports including lessons learned.
• Develop recovery priorities, timelines, and strategy for proper sequence of recovery components
• Assist Crisis Management / Incident Management teams during service disruption events and contribute to process improvement initiatives.
• Educate team members in the correct implementation of BC & DR processes, standards and impart training to ensure recoverability of business processes and supporting services across business functions.
• Should understand complete assessment lifecycle from assessment scoping to project deliverables
• Great communication skills and the ability to break down and explain complex data security problems
• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels
• Strong understanding of privacy regulations such as GDPR, CCPA, Draft India Data Protection Bill and privacy frameworks
• Must have implemented and/or supported Data Protection technologies.
• Should have experience in at least 3 end to end privacy assessment & implementation projects (GDPR, PDP, other country specific regulations)
• Interview client stakeholders and develop project artifacts such as Privacy Impact analysis, data flow diagrams & identify gaps
• Experience in performing Privacy impact assessments, data discovery, data classification and developing data flow maps
• Experience in implementation and use of privacy enhancing technologies and design of data privacy framework.
• Experience with development and implementation of data protection solutions such eDiscovery tools, Data Classification solutions, Data Leakage Prevention solutions to ensure privacy policies are correctly implemented. Implementations should advance compliance with legal forms of data use as well as support business use of data
• Knowledge of data anonymization, psuedomization and encryption technical controls to develop systems that improves privacy protections
• Must have experience in Database protection and hands on knowledge in one or more of associated technologies
• Working knowledge of designing privacy enhancements for with a goal of developing technical solutions and systems to mitigate privacy risks
• Great communication skills and the ability to break down and explain complex data security problems
• Excellent presentation skills and ability to effectively communicate proposals and point of view at senior management levels