Senior Officer - IT Security/Risk & Compliance - Bank

URGENT OPPORTUNITY WITH WORLD BANK.

Title- Senior IT Officer, Security, Risk and Compliance

Grade- GG-equivalent to VP or GM in India.

Location- Chennai

Term Duration: 4 Years

"" PLEASE READ THE JD IN DETAIL BEFORE APPLYING FOR THIS ROLE". KINDLY SHARE YOUR UPDATED PROFILE.

This is the lead position for the ICFR, risk and compliance function for ITSFI.

The position reports to the CIO, Finance.

Note: If the selected candidate is a current Bank Group staff member with a Regular or Open-Ended appointment, s/he will retain his/her Regular or Open-Ended appointment. All others will be offered a 4 year term appointment.

Duties and Accountabilities: " PLEASE READ THE JD IN DETAIL BEFORE APPLYING FOR THIS ROLE". KINDLY SHARE YOUR UPDATED PROFILE.

Experienced IT professional establishing the direction for enterprise wide projects and contributing to strategies, plans, and policies related to security, risk management, and/or compliance.

- Identifies areas where the architecture requires change or development and proposes changes to align with standards and policies.

- Selects enterprise-wide technology solutions to provide security, risk, and/or compliance functions as appropriate. Maintains relationship with vendors regarding support of solutions.

- Oversees business impact analyses from a risk, security, compliance to ensure WBG resources are adequately protected.

- Develops, publishes and maintains enterprise wide frameworks, standards, procedures and guidelines in their area(s) of expertise.

- Reviews trend analysis reports and provides briefings to relevant staff to advise on critical issues related to security, risk, and/or compliance.

- Reviews documentation related to exceptions and follows up or investigates as appropriate.

- Provides support for enterprise-wide application and infrastructure related projects, consulting on and resolving issues in their area(s) of expertise.

- Understands future trends in security, compliance, and/or risk management and disseminates that information throughout the organization.

- Prepares reports or presentations for senior management for their areas of responsibility.

- Coordinates with ITS and business colleagues to promote audit readiness and to prepare for internal and external audits.

- Institute and maintain an effective training and communication program for ITS, including promotion of a risk, security and compliance culture.

- Provides technical expertise on the administration of technical solutions as it relates to their area(s) of expertise.

- Defines metrics to be used for management reporting and reports status on activities, issues, projects, etc to senior ITS management, including the effectiveness and efficiency of risk management, security and compliance activities.

- Designs controls, standards and key risk and performance indicators.

- Guides and ensures the development and execution of security/compliance/risk awareness programs across the WBG.

- Provides direction to staff and contractors in their area of expertise.

- Accountable for mentoring and developing technical staff in their domain.

- Responsible for managing performance of team members.

- Responsible for development and career management of team members.

- Manages allocated resources (including financial, human resources and technology).

PLUS:

- Proposes plans and strategies that focus on ITS' long term objectives, taking an enterprise-wide focus.

- Serves as an authoritative expert and key resource in the organization for other senior professionals and ITS leadership to provide technical guidance.

- Plays a leadership role in the development of future technical talent across all of ITS.

Additional responsibilities will include, but are not limited to:

- Take the lead to provide oversight and manage the IT related aspects of the external/internal audits on the Internal Controls over Financial Reporting (ICFR).

- Serve as the lead point of contact for external/internal auditors related to control design audit walk throughs, response to audit queries etc.

- Independently assess the design and operational effectiveness of General IT Controls in the areas of Application Development & Maintenance, Change Management and IT Operations.

- Manage open IT audit items from external/internal auditors to ensure timely remediation as per the agreed action plans.

- Ensure that required management reporting and reports to risk/compliance committees are performed in a timely manner.

- Ensure that tools used to assist ITSFI team members stay compliant with defined processes are functioning properly.

- As needed, represent the ITSFI CIO as it relates to IT risk and compliance in the financial applications space.

Selection Criteria:

- Master's degree with 12 years relevant work experience

- Experience in conducting assessments, designing processes, and implementing General IT Controls related to Application Development & Maintenance, Change Management and IT Operations.

- Good understanding of the different Software Development Life Cycles and relationship to compliance.

- Experience in conducting design and operating effectiveness testing for the General IT Controls.

- Familiarity and understanding of broad range of software and hardware products.

- Knowledge of ERP and financial systems such as SAP, PeopleSoft, Summit, ACBS and enterprise GRC systems such as BWise.

- Knowledge of issue tracking tools such as Jira and Remedy.

- Possession of industry certification is highly preferred.

The World Bank Group is committed to achieving diversity in terms of gender, nationality, culture and educational background. Individuals with disabilities are equally encouraged to apply. All applications will be treated in the strictest confidence.

Sandeep Roy
- : +91-981.987.1449|- : +91-22-6742-2324 | +91-22- 2618-0449