IT Operational Risk Management Role - BFS

- Effectively manage IT operational risks pertaining to User Access Mgt. (UAM) & Segregation of Duties (SOD) in various Entities and different business functions

- Report to the senior management periodically on the SOD related activities

- Build risk culture, create awareness and support in various reviews and regulatory requirements

Major Deliverables :

- Identify potential risks and gaps related to user access and SOD including but not limited to role conflicts, data breaches, etc.

- Conduct thorough review of the access matrix & roles designed prior to implementation

- Periodically review & update the SOD Framework

- Maintain application & access universe from UAM & SOD perspective

- Perform periodic sample testing of users & role access

- Building exception reports and reviewing the output for UAM / SOD improvement

- Prepare Risk & Control Matrix and facilitate Risk & Control Self- Assessment (RCSA) and create Key Risk Indicators (KRIs) for various LoBs from UAM & SOD perspective. Assist in Internal Financial Controls review cycle.

- Collaborate with IT, business & support functions to ensure effective risk management practices are integrated into daily operations

- Check compliance with relevant regulatory requirements, industry standards and internal policies

- To conduct other IT process reviews, control testing, etc. and monitor implementation of mitigation strategies (as & when required)

Educational Qualification:

- Post-Graduate with 5-7 (flexible) years of relevant experience in financial sector..

- Desired Experience: Exposure in IT op risk management, Knowledge and implementation of Segregation of duties in a Bank/NBFC. Good understanding of IT systems, networks and security protocols.

Other Desired attributes:

- Good communication, presentation & interpersonal skills.

- Good understanding of Segregation of Duties for access provided in IT application system.

- Strong analytical and problem-solving skills and knowledge on the roles and access in various systems used in Banks/NBFC.

- Ability to interact with senior management & to engage with a diverse group of stakeholders and drive projects within defined timelines

- Knowledge of relevant regulatory requirements and industry standards