Deputy Vice President - Cyber Risk & Governance - Bank

IS Risk Manager- Cyber Risk &Governance with Top Bank

Job Purpose:

Responsible for:

1. Information security risk management including risk register & policy / procedure

2. Information security risk element of existing systems change/enhancement including change advisory board

3. Exception management including running ISRMC(information security risk management committee)

4. Payment gateway merchant & vendor security assessment

5. ISO 27001 sustenance and support

6. Regulatory & Audit submissions, Metrics for cyber risk vertical.

7. Engagements with ORM, IT Risk team. IT Gov team etc.

a) Conduct periodic ISRMC meeting with agenda alignment as per CISO directive, presenting risk reduction measures, tracking and closure of action points.

b) Ensure necessary gaps are highlighted to the senior management and exceptions documented. Work on exception applicability framework development and enhancement.

c) Participate in Change Advisory Board (CAB) meetings as ISG representative.

d) Manage the policy framework and develop metrics, KRI and management dashboards. Process documentation.

e) Manage the risk register and work with the concerned stake-holders for risk rationalization and updating, Conduct quarterly CISO reviews.

f) Manage and ensure timely submission of regulatory, board notes and other internal/external advisories.

g) Oversee and also carry out(where required) risk assessment for changes/ enhancements to existing applications, ASST waiver etc.

h) Manage the Payment Gateway merchant onboarding end to end security testing, VAS and payment methods, VAS scope assessment, VAS vendor meetings, VAS -Test case and integration flow review.

i) Manage the ISO 27001 sustenance and support to Governance team

j) Ensure active collaboration with ORM, IT Risk team. IT Gov team etc. for security best practices alignment.