HDFC Bank - Security Oversight Manager - Cards

Direct Reports to : Head Security Oversight

Job Purpose :

This position is to perform the role of information security risk analysis and risk management of all the cards applications, infrastructure systems and processes at the Bank.

The main responsibilities include :

Card Risk Analysis :

- Owner of the Risk analysis process, which is concerned with gathering information about exposure to risk so the organisation can make appropriate decisions and manage card related risks appropriately.

- Develop a risk model, which will help perform risk analysis and provide a measurable output to take business decisions in terms of risk mitigation or acceptance.

- Perform risk analysis on the existing threats/controls or new projects and provide a business impact assessment report to the business manager.

Card Risk Management :

- Owner of the Risk management, which requires processes to monitor risks, including adequate information about risks and the decision process supported by risk analysis, identification and evaluation.

Compliance to Card Security guidelines :

- Analyze the current state of all cards applications, infrastructure systems and processes at the Bank and parallely provide support to stakeholders in implementing the recommendations suggested.

- Track the status implementation status of the recommendations suggested for each application, process and infrastructure systems.

- Post discussions and information analysis, CSA report is to be prepared and shared with all stakeholders for their sign-off.

- As part of project management, implementation status dashboards to be released to all stakeholders.

Key Relationships Linkages:

Audit :

- Ensure that identified weakness on policy deficiencies or risk management process through audit fieldwork are understood and a remediation actions are initiated to resolve them

Information Technology Team :

Business Managers & all Staff :

- Perform risk analysis for all the raised queries by different stakeholders

- Obtain card security incidents reported across the Bank

- Coordinate card risk and impact assessment for each BAU

Legal & Compliance :

- Incidence Response

- Communications with the regulator

- Understanding of the compliance needs

Corporate Communications :

- Incidence Response

- Training and awareness

Education & Experience :

Required :

- Bachelor of Science or Bachelor of Engineering

- Six years related experience in the field of Information Security or IT Risk management

- Three years related experience in the field of Cards Management & Security

- Three years related experience in the field of Governance & Compliance

- Good written and spoken communication skills

A working knowledge of most aspects of information security is essential, as is the ability to apply this knowledge in an open network environment