Director - Risk and Business Continuity Management

Role Description and Accountabilities:

- Establish and Chair the S&P Capital IQ Risk Management Committee for APAC. Partner with Committee stakeholders (Content Management, Technology Management, Building/Emergency Management, Business Affairs, APAC Regulatory Affairs (GRA), Internal Audit, Compliance, and others) to develop the appropriate criteria, risk and control practices, and reporting for all new process and operations design efforts; ensure the on-going identification, prioritization, reporting, review, and management of operational risks for the APAC region

- Lead/conduct enterprise-wide business impact analyses, segment, process, and operations level risk assessments, and system and control audits (directly or in partnership with internal/external auditors or consultants); partner with GRA, Compliance, and S&P Capital IQ CRO leadership to calibrate outputs, mitigation, and residual risk containment strategies and tactics to business accepted risk levels.

- Provide leadership and guidance to S&P Capital IQ leadership teams and managers in India to incorporate business continuity capabilities and best practices across the business, aligned with regulatory requirements, corporate policies, and ISO 22301/22313 where practical.

- Develop and maintain an APAC-wide register of business and technology risks, and ensure appropriate actions (and accountabilities) are in place to manage/mitigate these risks and/or calibrate them to business accepted levels.

- Develop sub-reporting capabilities to provide transparency to stakeholders for product/platform/process/facility risk assessments, and report on compliance with McGraw Hill Financial and S&P Capital IQ requirements for the APAC region (i.e., data privacy, cyber security, health and safety, business critical outage incident reporting, etc.).

Qualifications:

- Expert practitioner level understanding and experience in various aspects of Operational Risk Management, Business Continuity Management (including IT Disaster Recovery), Information Security, Third-Party Risk Management, and risk assessment/prioritization/reporting/mitigation.

- Extensive and hands-on experience in business continuity planning, information security management, IT service management and continuity, crisis and incident management, physical security/emergency management, and disaster recovery planning.

- Extensive/expert level experience in methods of business analysis, supply and value chain analysis, dependency analysis, threat assessment, risk assessment, and business impact analysis.

- In depth experience developing and calibrating risk management, quality, and control practices to ISO 9001, ISO 31000, ISO 22301/22313, ISO 27001, and ISO 20000 (ITIL), and designing instructional

- Awareness/educational programs to embed risk management best practices into process/operations development and management methods, disciplines and life cycle processes.

- MBA or Master's Degree in a risk related technical discipline

- Certifications in Business Continuity Management (CBCI or MBCI preferred) and Information Security Management (CISA, CISM, or CISSP preferred). Also BCM/ISM audit certifications are highly desirable.

This job opening was posted long time back. It may not be active. Nor was it removed by the recruiter. Please use your discretion.