IT Risk & Audit Role - Insurance

IT Risk:

- Develop, administer and improve the IT risk management program. Work closely with IT functional groups to document risks, mitigations /controls and tracking

- Conduct Annual Risk Control Self Assessments for identified departments

- Participate/assist in internal security assessments, cloud security evaluations and third party control assurance

- Carry out Vendor Risk Assessment (as and when necessary)

- Active participation in driving education and awareness of technology related issues and risks to business/business IT teams

Data Privacy:

- Maintenance and continuous improvement of the Privacy program

- Periodic review of Privacy policies and departmental PII inventories

- Conduct annual Privacy impact assessments and data leakage assessments (as required)

- Evaluate Data Privacy risks in new/upcoming projects undertaken by the business teams

Business Continuity:

- Maintenance and continuous improvement of the Business continuity program and underlying policies and procedures

- Assist/Lead Business Impact analysis (BIA) of all/critical functions of the organization

- Co-ordinate and conduct BCP drills