Head - IT GRC & Business Excellence

Experience :

- Should have 16-19 years of continuous experience in quality engineering or quality assurance and Security Governance

- Should have experience in a CMM level 5 or higher organization.

Qualification : BE/MBA, PMP Certified, ITIL certified

Job Description :

GRC Services :

- GRC and Security Governance

- Implement and manage a strong Security Governance program

- Work with the IT Risk and CISO team and ensure security readiness

- Engage with internal and external audit teams

- Co-ordinate with internal IT team and IT vendors and ensure security readiness

Roles & Responsibilities :

- Will drive business transformation through Next Generation process governance initiatives such as DevOps, Lean Six Sigma etc.

- Will be responsible for handling both internal and external process/governance/quality audits

- Create employee awareness, interest, and participation in implementation of quality processes e.g. training, audits, SQA etc

- Create and maintain appropriate quality infrastructure for people to perform e.g. in-house development of process automation tools, evaluation of vendor tools etc

- Establish communication channels within organization e.g. training

- Spread quality awareness

- Work towards quality related milestones

- Build progressive quality initiatives over a period e.g. CMMI, Six Sigma

- Management of company wide quality processes

- Management of SEPG, SQA and process automation teams

- Pilot new practices and ensure buy-in and understanding at all levels before widespread use

- Manage Metrics program

- Management reporting of Quality initiatives

- Ensure compliance and reporting requirements for IT and Security processes like (but not limited to) :

a. Asset management

b. Access management

c. Change management

d. Patch management

e. Hardening guidelines

f. Secure code guidelines

- Prepare the processes, teams, documents for internal and external audits

- Manage statutory, regulatory & internal committee meetings and proceedings

- Track and remediate all audit observations with corrective and preventive actions

- Manage MIS reports to various internal and external stakeholders

- Manage the ISO 27001:2013 implementation and audits for the organisation

- Resolve all security alerts raised by SOC within the IT function with corrective and preventive actions

- Works with the CISO and/or IT Risk teams to track and remediate all findings/observations/improvements reported by the respective teams

- Directly responsible for procedures and controls to assure compliance with applicable regulatory and legal requirements as well as good business practices.

- Oversee/Facilitate formal risk analysis and self-assessments program for various systems and processes, as required by the CISO and/or IT Risk teams

- Act as a liaison between the CISO/IT Risk and the IT Teams to ensure all governance, risk and compliance management activities are managed end-to-end, and the lifecycle of various initiatives and operational activities are completed/concluded

- Strong documentation and communications skills

- Ability to prioritize and multitask. Flexibility and adaptability in work approach

Required Skills :

- Proven track record of process governance framework implementation across legacy/modern applications and infrastructure driven projects

- Extensive experience with SEI-CMM, SEI-CMMI or ISO9000 standards and ITIL framework methodologies

- Experience in DevOps implementation with focus on Continuous Integration and Continuous Delivery (CICD)

- Extensive Experience of complete SDLC methodologies such as Waterfall, Agile and Scrum

- Process Improvement and Re-Engineering - Ability to assess software quality and IT operations- processes and evaluate for improvement opportunities consistently and effectively

- Proficiency in Banking/Financial Services/Stock Exchange domain

- Proficiency in Internal quality audit and training employees on Quality Standards.

- Ability to understand and review technical documentation, including Project plans, test procedures and design documents.

- Experience with process related activities (such as standards development, project reviews, and process improvement) as well as monitoring activities (such as tracking compliance with entry and exit criteria and reporting program metrics).

- Ability to create and publish Software Quality Assurance Matrices

- Proficiency in development, maintenance, and enhancement of QA standards and procedures

- Ability to interface directly with cross functional teams and to transfer knowledge.

Nice to have :

- Excellent problem solving and time-management skills.

- Strong statistical analysis skills and clear understanding of performance metrics.

- Detailed oriented and ability to develop, review and maintain metrics and perform quality audits.

- Ability to perform independently with minimal supervision