IW
Risk Control Assessment
Info Way Solutions LLC
🇮🇳 India
On-site
1 month ago
- Incident Management
- Incident Response
- Change Management
- ServiceNow
- Jira
- ISO 27001
- CRISC
- CISM
- CISA
- CISSP
- GDPR
- PCI DSS
1 month ago
| Risk Control Assessment | Service Now GRC | Primary Skills: • 5+ years of hands-on experience with controls management and related lifecycle, including design, implementation, validation and operational effectiveness testing. • Third party risk and control assessment experience • Experience managing stakeholders across a variety of seniorities and technical understanding, with the ability to explain and educate stakeholders on IT risk and controls and related topics • Ability to work under time pressured conditions against deadlines whilst achieving or exceeding KPIs measuring completion of testing and assessments work • Business level fluency in spoken and written English Secondary Skills: Ability to read and explain (to non-IT colleagues): technical diagrams (service or application), data flows, technical solution documentation. Good understanding of core IT risk and control areas, such as IT Incident Management, Security Incident Response, IT Problem Management, IT Change Management, IT Resilience, Business Recovery Experience working with ServiceNow GRC (Governance, Risk and Compliance) tooling and JIRA Good to have: IT risk and control related certifications, such as ISO27001, CRISC, CISM, CISA or CISSP Knowledge of risks and controls commonly found in the Financial Services sector, such as those related to GDPR, DORA, ISF Standard of Good Practice, NIST CSF, PCI DSS and PSD2 IT-related academic background (experience information systems, and network design, cloud infrastructure, system administration or similar). JD: As a member of TRAC, you will be part of the team that offers technology risk assessment and advisory services for the Bank. From a functional perspective you will help manage and conduct technology risk assessments with service owners who are our key stakeholders, as well as consult on a wide range of new and emerging technology risk areas as part of various strategic initiatives. You will also support identification, assessment and registration of controls which have a mitigating effect on technology risk as part of the IT Risk and Control Self-Assessment process service. |
Risk Control Assessment · Info Way Solutions LLC