This position is to perform the role of information security risk analysis and risk management in the Bank. The Risk management should cover- Risks analysis, risk assessment for various projects and existing solutions. It includes below:  - Follow a risk assessment process that is consistent across all risks and the organisation to identify and evaluate key risks.   - Implement policies, standards and procedures to ensure that all identified risks are managed within the organisation's risk appetite.   - Regularly monitor the risk management processes and the corrective actions.   - Regularly present risk reports to the key stakeholders, and invite feedback into the risk processes.  - Communicate appropriate risk information to the organisation's stakeholders.  - Maintain and track all the risk jobs for reporting and records  - Governance (ISRMC, Internal Audit, Sox & Stat)  - Plan scope of audit with stakeholders and senior management  - Discuss key observations with auditors  - Track closure of gaps identified during the review and ensure timely closure.  - Tracking and closure of action items (ISRMC) as well as RAF discussion.  - Review and make changes in the Policies, Standards and procedures under own domain as per the documented frequency or as and when required due to changes in the security framework.  - PCI DSS Compliance for Merchants Merchants PCI DSS Compliance   - Manage the merchant compliance desk and defined deliverables.  - Periodically review, track and report on deliverables including merchant PCI DSS compliance.  - Meet compliance requirements like MCVR and RBI guidelines wrt merchants and service providers.  - Spoc for merchant services team to assess new merchant requirements, new solutions and enhancements.  Process documentation :  Focus on securely facilitating business requirements (BAU ). :  Hold contact sessions with specific team representatives and proactively engage with business/IT/Audit teams thereby ensuring security is developed holistically and not as an appendage. Identify CAPA (corrective & preventive actions) to be implemented.   Process documentation :   Risk Management(including SMAC) Risk Management (including SMAC) a) Demonstrate sufficient understanding of business processes, internal control risk management, IT controls and related standards :  - Maintain all the risk jobs for reporting and records via central risk dashboard.  - Review and assess the requirements under SMAC category  - Create appropriate checklists and testing approach for SMAC category  - Perform risk assessment based on technical and business requirements documented.  - Ensure appropriate testing and closure of observations. Provide exceptions based on risk assessment  - Closure and documentation

Mumbai

Senior Risk Manager - Information Security - BFSI 

Senior Risk Manager - Information Security - BFSI  ,Job Description for Senior Risk Manager - Information Security - BFSI  in Prowess Services in  Mumbai for (8-12) years of experience. Apply Now!

Job Description for Senior Risk Manager - Information Security - BFSI  in Prowess Services in  Mumbai for (8-12) years of experience. Apply Now!