Didn't find the right job?

Get expert career advice to help you find the ideal role and improve your job search strategy.

138 Risk Management Strategies jobs in India

Risk Control

₹1500000 - ₹2500000 Y Xforia Technologies

Posted 1 day ago

Tap Again To Close

Job Description

Job Description: Control Testing and Assurance SOX, Key, Cloud, and Data Management IT/IS Controls

Design and execute control testing strategies to assess the design adequacy and operating effectiveness of IT/IS controls, including SOX and key controls.
Develop and implement test plans, scripts, and templates to support control assurance objectives.
Conduct control walkthroughs with control owners, including sampling and evidence collection.
Identify control gaps and deficiencies and recommend corrective actions.
Perform root cause analysis of issues and collaborate with control/process owners to define holistic remediation plans.
Track and validate remediation actions post-testing to ensure timely and effective resolution.
Prepare comprehensive testing documentation, including workpapers and reports, to communicate findings and recommendations.
Liaise with stakeholders to prioritize controls and document repeatable test scripts for design and operational effectiveness testing.
Review and enhance existing control testing methodologies based on IT risk and control frameworks and industry best practices.
Collaborate with onshore and offshore teams to gather necessary evidence and support testing activities.
Maintain up-to-date knowledge of industry standards, regulatory requirements, and best practices in IT/IS control testing.
Perform security reviews, identify architectural gaps, and contribute to the development of security risk management plans.
Communicate findings and insights to relevant stakeholders, including risk owners, management, and audit teams.
Demonstrate a strong understanding of risk and control frameworks and core risk management principles.

Qualifications

Bachelor's degree (or equivalent experience) with minimum 3-5 years of experience in IT risk and control testing, Risk and compliance. Preferably with global banking clients.

ISO 27001, CRISC or CISA Certified Mandatory, CISSP certification Desirable
Information Systems/Network Security

-Understanding of NIST, ISO, COBIT or equivalent cyber security framework.

Information Technology Assessment and Risk Management

This advertiser has chosen not to accept applicants from your region.

Manager - Tech Risk & Control

Haryana, Uttar Pradesh American Express

Posted 5 days ago

Tap Again To Close

Job Description

**Description**
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.
Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
**Key Responsibilities**
Regulatory
+ Managing Regulatory Landscape and assess impact.
+ Managing Regulatory audits and drive interactions with Regulators.
+ Providing regulatory guidance and training on circulars, advisories, Master Directions etc.
+ Manage internal audits, 2nd line, 3rd line
+ Manage IT Ad-hoc Returns in collaboration with CISO, MCO and CRO.
+ Audit Support of Annual PSS Audit, Annual Statutory Audit, IAG Audits (Concurrent), IT Exams, Network Exams, Taxation Audit (adhoc), adhoc audits etc.
+ Responsible for Regulatory Submissions like Quarterly RBI KRI submission, Response to Questionnaires, Response to Circulars/Advisories, Ad-hoc Regulatory requests, Compliance to Master Directives, Incident/outage reporting process, Semi-Annual DR compliance for RBI
+ Monitor and support key regulatory initiatives for the Bank in collaboration with Business Regulatory Office (BRO).
+ Responsible for adhering to regulatory exam practices in collaboration with Regulatory exam management team, 2nd line risk teams, Control Management teams and IAG.
Communication
+ Ability to draft and own Regulatory, Incident and Technical Documentation and communication
Technology
+ L1 L2 support for Application under CTO ownership including management of service now workgroups, incident/problem management and release & deployment
+ Understanding of technology SDLC lifecycle
+ Understanding of tech-debt and manage tech-led initiatives
+ Experience with tools such as ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, automation tools, Monitoring Tools (geneos, dynatrace, app dynamics,etc ), observability, workflow tools such as selenium etc (Hands-on on monitoring tools ServiceNow would be an advantage), Data Visualization and Reporting tools such as Tableau, PowerBI
+ Manages the identification and evaluation of controls and adherence to controls, ensuring effective implementation and reporting
+ Familiar with technology MIS reporting (including automated reporting)
+ Should be able to process regulatory requirements and compliance standards in the technology sector
+ Be a part of the team that ensures alignment of IT Strategy with Business requirements
Project / Program Management
+ Project planning, implementation, documentation, management
+ Help initiate a project (on-boarding resources and access)
+ Establish the project plan and tracking of activities.
+ Communicate the progress on the project plan to relevant stakeholders
+ Program Management / Oversees the management and integration of several projects simultaneously, adjusting scope, timing, and budgets to efficiently utilize resources and adhere to program timelines and budgets
Stakeholder Management
+ Facilitate discussions with key stakeholders across Business, Operations and Technology
+ Participate and conduct reviews as applicable with relevant stakeholders across Business, Operations and Technology
Vendor / Affiliate Management
+ Technology Affiliate Management entailing monthly Reporting of Technology Performance as outlined in Affiliate Agreement.
+ Coordinating, tracking, preparing and presenting reports to internal/external stakeholders including Affiliate reporting, Disaster Recovery reporting, Incident reporting etc.
Technology Risk
+ Manage, Mitigate Tech Operational Risks.
+ Understand and lead RCSA for technology
Status Reporting
+ Periodic updates on deliverables to multiple types of stakeholders catering to different levels
+ Prepares and presents detailed management reports and documentation to senior leadership and stakeholders, providing clear and accurate records of various technology assessments, mitigation actions, and compliance status
India Localization
+ Monitor and Govern India Data localization controls including maintenance of the Application list to avoid potential compliance breaches.
+ Collaborate with various teams to ensure completion got the localization agenda from a technology standpoint basis compliance need
Processes
+ Champion of Incident Management, Change Management, Release Management, Problem/ Defect Management, Capacity Management and other essential processes from technology applicability
People
+ Adapt to oversee / mentor a team of Technology colleagues, enabling a culture of continuous learning, growth opportunities, and inclusivity for individual colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards
+ Adapt to provide direct leadership and coaching to Technology teams, supporting training and development of best practices
+ Adapt to manage resource allocation, project timeline, and budget for projects, ensuring alignment with organizational goals
+ Adapt to collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit, implementing strategies for talent retention and professional development
+ Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectives
+ Provides key inputs in training and development programs to enhance skills and knowledge in Technology, ensuring continuous professional growth and the ability to effectively manage current and future risks
**Qualifications**
We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
+ Competitive base salaries
+ Bonus incentives
+ Support for financial-well-being and retirement
+ Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
+ Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
+ Generous paid parental leave policies (depending on your location)
+ Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
+ Free and confidential counseling support through our Healthy Minds program
+ Career development and training opportunities
American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
**Job:** Technologies
**Primary Location:** India-Haryana-Gurgaon
**Schedule** Full-time
**Req ID:**

This advertiser has chosen not to accept applicants from your region.

Associate - Tech Risk & Control

Haryana, Uttar Pradesh American Express

Posted 5 days ago

Tap Again To Close

Job Description

**Description**
At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.
Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.
**How will you make an impact in this role?**
Regulatory
+ Understand the Regulatory Landscape and assess impact.
+ Understand Regulatory audits and related interactions with Regulators.
+ Understand and connect the dots with the current landscape on circulars, advisories, Master Directions etc.
+ Liaise with other 1st lines of defense such as Control Management, Information Security and 2nd line (Risk), 3rd line (Internal Audit Group).
+ Manage IT Ad-hoc Returns in collaboration with CISO, MCO and CRO.
+ Audit Support of Annual PSS Audit, Annual Statutory Audit, IAG Audits (Concurrent), IT Exams, Network Exams, Taxation Audit (adhoc) and any other adhoc audits.
+ Responsible for Regulatory Submissions like Quarterly RBI KRI submission, Response to Questionnaires, Response to Circulars/Advisories, Ad-hoc Regulatory requests, Compliance to Master Directives, Incident/outage reporting process, Semi-Annual DR compliance for RBI
+ Monitor and Support key regulatory initiatives for the Bank in collaboration with Business Regulatory Office (BRO).
+ Responsible for adhering to regulatory exam practices in collaboration with Regulatory exam management team, 2nd line risk teams, Control Management teams and IAG.
Communication
+ Ability to draft and update w.r.t Regulatory, Incident and Technical Communication
Technology
+ L1 L2 support for Application under CTO ownership including management of service now workgroups, incident/problem management and release & deployment (Hands on)
+ Must have worked in multiple stages of SDLC lifecycle
+ Understanding of tech-debt and manage tech-led initiatives
+ Experience with tools such as ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, automation tools, Monitoring Tools (geneos, dynatrace, app dynamics,etc ), observability, workflow tools such as selenium etc (Hands-on on monitoring tools ServiceNow would be an advantage), Data Visualization and Reporting tools such as Tableau, PowerBI
+ Manages the identification and evaluation of controls and adherence to controls, ensuring effective implementation and reporting
+ Familiar with technology MIS reporting (including automated reporting)
+ Should be able to process regulatory requirements and compliance standards in the technology sector
+ Be a part of the team that ensures alignment of IT Strategy with Business requirements
Project / Program Management
+ Project planning, implementation, documentation, project lead
+ Help initiate a project (on-boarding resources and access)
+ Establish the project plan and tracking of activities.
+ Communicate the progress on the project plan to relevant stakeholders
+ Familiar with project management tools such as Rally, JIRA etc.
Stakeholder Management
+ Initiate and participate as applicable in discussions with key stakeholders across Business, Operations and Technology
+ Participate and conduct reviews as applicable with relevant stakeholders across Business, Operations and Technology
Vendor / Affiliate Management
+ Technology Affiliate Management entailing monthly Reporting of Technology Performance as outlined in Affiliate Agreement.
+ Coordinating, tracking, preparing and presenting reports to internal/external stakeholders including Affiliate reporting, Disaster Recovery reporting, Incident reporting etc.
Technology Risk
+ Identify, Mitigate Tech Operational Risks.
+ Familiarization with RCSA (formerly known as PRSA)
Status Reporting
+ Periodic updates on deliverables to multiple types of stakeholders catering to different levels
+ Prepares and presents detailed management reports and documentation to senior leadership and stakeholders, providing clear and accurate records of various technology assessments, mitigation actions, and compliance status
India Localization
+ Monitor and Govern India Data localization controls including maintenance of the Application list to avoid potential compliance breaches.
+ Collaborate with various teams to ensure completion of the localization agenda from a technology standpoint basis compliance needs
Processes
+ Champion of Incident Management, Change Management, Release Management, Problem/ Defect Management, Capacity Management and other essential processes from a technology applicability
People
+ Enable a culture of continuous learning, growth opportunities, and inclusivity for self and colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards
+ Supporting training and development of best practices
+ Collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit
+ Provides key inputs in training and development programs to enhance skills and knowledge in Technology, ensuring continuous professional growth and the ability to effectively manage current and future risks
**Education and Knowledge**
+ Bachelor's Degree inComputer Science, Information Systems, Cybersecurity, and/or comparable experience
+ Good knowledge of global technology standards and applicable regulations
+ Good knowledge of technology control domains such as Identity & Access Management, Security Architectures, Security Governance & Operations, IT General Controls, Security Testing, and Cloud Security
+ Good understandingin enterprise risk management with an emphasis on operational risk management and technology risk
+ Proficiency in FLOD, SLOD ,TLOD construct with clear understanding of roles
**Work Experience**
+ Experience in technology lifecycle of SDLC, SRE/ Technology Support (L1 L2)
+ Experience in processing regulatory requirements/ projects and compliance standards in the technology sector
+ Experience with tools such as Dynatrace, AppD, ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, observability, automation tools, workflow tools such as selenium etc
+ Experience with Data Visualization and Reporting tools such as Tableau, PowerBI
+ Exposure to mainframe or distributed technologies would be an added advantage
+ Exposure to Enabling functions (Vendor management, GRC, etc),
+ Exposure to technology risk & control and information security would be an added advantage
**Qualifications**
We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:
+ Competitive base salaries
+ Bonus incentives
+ Support for financial-well-being and retirement
+ Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
+ Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
+ Generous paid parental leave policies (depending on your location)
+ Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
+ Free and confidential counseling support through our Healthy Minds program
+ Career development and training opportunities
American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.
Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.
**Job:** Technology
**Primary Location:** India-Haryana-Gurgaon
**Schedule** Full-time
**Req ID:**

This advertiser has chosen not to accept applicants from your region.

Associate - Tech Risk & Control

Gurugram, Uttar Pradesh ₹800000 - ₹1800000 Y American Express

Posted 1 day ago

Tap Again To Close

Job Description

At American Express, our culture is built on a 175-year history of innovation, shared values and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Regulatory

Understand the Regulatory Landscape and assess impact.
Understand Regulatory audits and related interactions with Regulators.
Understand and connect the dots with the current landscape on circulars, advisories, Master Directions etc.
Liaise with other 1st lines of defense such as Control Management, Information Security and 2nd line (Risk), 3rd line (Internal Audit Group).
Manage IT Ad-hoc Returns in collaboration with CISO, MCO and CRO.
Audit Support of Annual PSS Audit, Annual Statutory Audit, IAG Audits (Concurrent), IT Exams, Network Exams, Taxation Audit (adhoc) and any other adhoc audits.
Responsible for Regulatory Submissions like Quarterly RBI KRI submission, Response to Questionnaires, Response to Circulars/Advisories, Ad-hoc Regulatory requests, Compliance to Master Directives, Incident/outage reporting process, Semi-Annual DR compliance for RBI
Monitor and Support key regulatory initiatives for the Bank in collaboration with Business Regulatory Office (BRO).
Responsible for adhering to regulatory exam practices in collaboration with Regulatory exam management team, 2nd line risk teams, Control Management teams and IAG.

Communication

Ability to draft and update w.r.t Regulatory, Incident and Technical Communication

Technology

L1+L2 support for Application under CTO ownership including management of service now workgroups, incident/problem management and release & deployment (Hands on)
Must have worked in multiple stages of SDLC lifecycle
Understanding of tech-debt and manage tech-led initiatives
Experience with tools such as ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, automation tools, Monitoring Tools (geneos, dynatrace, app dynamics,etc ), observability, workflow tools such as selenium etc (Hands-on on monitoring tools + ServiceNow would be an advantage), Data Visualization and Reporting tools such as Tableau, PowerBI
Manages the identification and evaluation of controls and adherence to controls, ensuring effective implementation and reporting
Familiar with technology MIS reporting (including automated reporting)
Should be able to process regulatory requirements and compliance standards in the technology sector
Be a part of the team that ensures alignment of IT Strategy with Business requirements

Project / Program Management

Project planning, implementation, documentation, project lead
Help initiate a project (on-boarding resources and access)
Establish the project plan and tracking of activities.
Communicate the progress on the project plan to relevant stakeholders
Familiar with project management tools such as Rally, JIRA etc.

Stakeholder Management

Initiate and participate as applicable in discussions with key stakeholders across Business, Operations and Technology
Participate and conduct reviews as applicable with relevant stakeholders across Business, Operations and Technology

Vendor / Affiliate Management

Technology Affiliate Management entailing monthly Reporting of Technology Performance as outlined in Affiliate Agreement.
Coordinating, tracking, preparing and presenting reports to internal/external stakeholders including Affiliate reporting, Disaster Recovery reporting, Incident reporting etc.

Technology Risk

Identify, Mitigate Tech Operational Risks.
Familiarization with RCSA (formerly known as PRSA)

Status Reporting

Periodic updates on deliverables to multiple types of stakeholders catering to different levels
Prepares and presents detailed management reports and documentation to senior leadership and stakeholders, providing clear and accurate records of various technology assessments, mitigation actions, and compliance status

India Localization

Monitor and Govern India Data localization controls including maintenance of the Application list to avoid potential compliance breaches.
Collaborate with various teams to ensure completion of the localization agenda from a technology standpoint basis compliance needs

Processes

Champion of Incident Management, Change Management, Release Management, Problem/ Defect Management, Capacity Management and other essential processes from a technology applicability

People

Enable a culture of continuous learning, growth opportunities, and inclusivity for self and colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards
Supporting training and development of best practices
Collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit
Provides key inputs in training and development programs to enhance skills and knowledge in Technology, ensuring continuous professional growth and the ability to effectively manage current and future risks

Education and Knowledge

Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, and/or comparable experience
Good knowledge of global technology standards and applicable regulations
Good knowledge of technology control domains such as Identity & Access Management, Security Architectures, Security Governance & Operations, IT General Controls, Security Testing, and Cloud Security
Good understanding in enterprise risk management with an emphasis on operational risk management and technology risk
Proficiency in FLOD, SLOD ,TLOD construct with clear understanding of roles

Work Experience

Experience in technology lifecycle of SDLC, SRE/ Technology Support (L1 + L2)
Experience in processing regulatory requirements/ projects and compliance standards in the technology sector
Experience with tools such as Dynatrace, AppD, ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, observability, automation tools, workflow tools such as selenium etc
Experience with Data Visualization and Reporting tools such as Tableau, PowerBI
Exposure to mainframe or distributed technologies would be an added advantage
Exposure to Enabling functions (Vendor management, GRC, etc),
Exposure to technology risk & control and information security would be an added advantage

We back you with benefits that support your holistic well-being so you can be and deliver your best. This means caring for you and your loved ones' physical, financial, and mental health, as well as providing the flexibility you need to thrive personally and professionally:

Competitive base salaries
Bonus incentives
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities

American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

This advertiser has chosen not to accept applicants from your region.

Manager - Tech Risk & Control

Gurugram, Uttar Pradesh ₹1200000 - ₹3600000 Y American Express

Posted 1 day ago

Tap Again To Close

Job Description

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

Key Responsibilities

Regulatory

Managing Regulatory Landscape and assess impact.
Managing Regulatory audits and drive interactions with Regulators.
Providing regulatory guidance and training on circulars, advisories, Master Directions etc.
Manage internal audits, 2nd line, 3rd line
Manage IT Ad-hoc Returns in collaboration with CISO, MCO and CRO.
Audit Support of Annual PSS Audit, Annual Statutory Audit, IAG Audits (Concurrent), IT Exams, Network Exams, Taxation Audit (adhoc), adhoc audits etc.
Responsible for Regulatory Submissions like Quarterly RBI KRI submission, Response to Questionnaires, Response to Circulars/Advisories, Ad-hoc Regulatory requests, Compliance to Master Directives, Incident/outage reporting process, Semi-Annual DR compliance for RBI
Monitor and support key regulatory initiatives for the Bank in collaboration with Business Regulatory Office (BRO).
Responsible for adhering to regulatory exam practices in collaboration with Regulatory exam management team, 2nd line risk teams, Control Management teams and IAG.

Communication

Ability to draft and own Regulatory, Incident and Technical Documentation and communication

Technology

L1+L2 support for Application under CTO ownership including management of service now workgroups, incident/problem management and release & deployment
Understanding of technology SDLC lifecycle
Understanding of tech-debt and manage tech-led initiatives
Experience with tools such as ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, automation tools, Monitoring Tools (geneos, dynatrace, app dynamics,etc ), observability, workflow tools such as selenium etc (Hands-on on monitoring tools + ServiceNow would be an advantage), Data Visualization and Reporting tools such as Tableau, PowerBI
Manages the identification and evaluation of controls and adherence to controls, ensuring effective implementation and reporting
Familiar with technology MIS reporting (including automated reporting)
Should be able to process regulatory requirements and compliance standards in the technology sector
Be a part of the team that ensures alignment of IT Strategy with Business requirements

Project / Program Management

Project planning, implementation, documentation, management
Help initiate a project (on-boarding resources and access)
Establish the project plan and tracking of activities.
Communicate the progress on the project plan to relevant stakeholders
Program Management / Oversees the management and integration of several projects simultaneously, adjusting scope, timing, and budgets to efficiently utilize resources and adhere to program timelines and budgets

Stakeholder Management

Facilitate discussions with key stakeholders across Business, Operations and Technology
Participate and conduct reviews as applicable with relevant stakeholders across Business, Operations and Technology

Vendor / Affiliate Management

Technology Affiliate Management entailing monthly Reporting of Technology Performance as outlined in Affiliate Agreement.
Coordinating, tracking, preparing and presenting reports to internal/external stakeholders including Affiliate reporting, Disaster Recovery reporting, Incident reporting etc.

Technology Risk

Manage, Mitigate Tech Operational Risks.
Understand and lead RCSA for technology

Status Reporting

Periodic updates on deliverables to multiple types of stakeholders catering to different levels
Prepares and presents detailed management reports and documentation to senior leadership and stakeholders, providing clear and accurate records of various technology assessments, mitigation actions, and compliance status

India Localization

Monitor and Govern India Data localization controls including maintenance of the Application list to avoid potential compliance breaches.
Collaborate with various teams to ensure completion got the localization agenda from a technology standpoint basis compliance need

Processes

Champion of Incident Management, Change Management, Release Management, Problem/ Defect Management, Capacity Management and other essential processes from technology applicability

People

Adapt to oversee / mentor a team of Technology colleagues, enabling a culture of continuous learning, growth opportunities, and inclusivity for individual colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards
Adapt to provide direct leadership and coaching to Technology teams, supporting training and development of best practices
Adapt to manage resource allocation, project timeline, and budget for projects, ensuring alignment with organizational goals
Adapt to collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit, implementing strategies for talent retention and professional development
Collaborates and co-creates effectively with teams in product and the business to align technology initiatives with business objectives
Provides key inputs in training and development programs to enhance skills and knowledge in Technology, ensuring continuous professional growth and the ability to effectively manage current and future risks

Competitive base salaries
Bonus incentives
Support for financial-well-being and retirement
Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)
Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need
Generous paid parental leave policies (depending on your location)
Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)
Free and confidential counseling support through our Healthy Minds program
Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

This advertiser has chosen not to accept applicants from your region.

Associate - Tech Risk & Control

Gurugram, Uttar Pradesh American Express

Posted today

Tap Again To Close

Job Description

At American Express, our culture is built on a 175-year history of innovation, shared and Leadership Behaviors, and an unwavering commitment to back our customers, communities, and colleagues. As part of Team Amex, you'll experience this powerful backing with comprehensive support for your holistic well-being and many opportunities to learn new skills, develop as a leader, and grow your career.

Here, your voice and ideas matter, your work makes an impact, and together, you will help us define the future of American Express.

How will you make an impact in this role?

Regulatory

Understand the Regulatory Landscape and assess impact.

Understand Regulatory audits and related interactions with Regulators.

Understand and connect the dots with the current landscape on circulars, advisories, Master Directions etc.

Liaise with other 1st lines of defense such as Control Management, Information Security and 2nd line (Risk), 3rd line (Internal Audit Group).

Manage IT Ad-hoc Returns in collaboration with CISO, MCO and CRO.

Audit Support of Annual PSS Audit, Annual Statutory Audit, IAG Audits (Concurrent), IT Exams, Network Exams, Taxation Audit (adhoc) and any other adhoc audits.

Responsible for Regulatory Submissions like Quarterly RBI KRI submission, Response to Questionnaires, Response to Circulars/Advisories, Ad-hoc Regulatory requests, Compliance to Master Directives, Incident/outage reporting process, Semi-Annual DR compliance for RBI

Monitor and Support key regulatory initiatives for the Bank in collaboration with Business Regulatory Office (BRO).

Responsible for adhering to regulatory exam practices in collaboration with Regulatory exam management team, 2nd line risk teams, Control Management teams and IAG.

Communication

Ability to draft and update w.r.t Regulatory, Incident and Technical Communication

Technology

L1+L2 support for Application under CTO ownership including management of service now workgroups, incident/problem management and release & deployment (Hands on)

Must have worked in multiple stages of SDLC lifecycle

Understanding of tech-debt and manage tech-led initiatives

Experience with tools such as ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, automation tools, Monitoring Tools (geneos, dynatrace, app dynamics,etc ), observability, workflow tools such as selenium etc (Hands-on on monitoring tools + ServiceNow would be an advantage), Data Visualization and Reporting tools such as Tableau, PowerBI

Manages the identification and evaluation of controls and adherence to controls, ensuring effective implementation and reporting

Familiar with technology MIS reporting (including automated reporting)

Should be able to process regulatory requirements and compliance standards in the technology sector

Be a part of the team that ensures alignment of IT Strategy with Business requirements

Project / Program Management

Project planning, implementation, documentation, project lead

Help initiate a project (on-boarding resources and access)

Establish the project plan and tracking of activities.

Communicate the progress on the project plan to relevant stakeholders

Familiar with project management tools such as Rally, JIRA etc.

Stakeholder Management

Initiate and participate as applicable in discussions with key stakeholders across Business, Operations and Technology

Participate and conduct reviews as applicable with relevant stakeholders across Business, Operations and Technology

Vendor / Affiliate Management

Technology Affiliate Management entailing monthly Reporting of Technology Performance as outlined in Affiliate Agreement.

Coordinating, tracking, preparing and presenting reports to internal/external stakeholders including Affiliate reporting, Disaster Recovery reporting, Incident reporting etc.

Technology Risk

Identify, Mitigate Tech Operational Risks.

Familiarization with RCSA (formerly known as PRSA)

Status Reporting

Periodic updates on deliverables to multiple types of stakeholders catering to different levels

Prepares and presents detailed management reports and documentation to senior leadership and stakeholders, providing clear and accurate records of various technology assessments, mitigation actions, and compliance status

India Localization

Monitor and Govern India Data localization controls including maintenance of the Application list to avoid potential compliance breaches.

Collaborate with various teams to ensure completion of the localization agenda from a technology standpoint basis compliance needs

Processes

Champion of Incident Management, Change Management, Release Management, Problem/ Defect Management, Capacity Management and other essential processes from a technology applicability

People

Enable a culture of continuous learning, growth opportunities, and inclusivity for self and colleagues and teams through mentoring, feedback, and metrics, and ensuring adherence to best practices and standards

Supporting training and development of best practices

Collaborate with senior leadership to hire top talent for the team, ensuring a high-functioning and cohesive unit

Provides key inputs in training and development programs to enhance skills and knowledge in Technology, ensuring continuous professional growth and the ability to effectively manage current and future risks

Education and Knowledge

Bachelor's Degree inComputer Science, Information Systems, Cybersecurity, and/or comparable experience

Good knowledge of global technology standards and applicable regulations

Good knowledge of technology control domains such as Identity & Access Management, Security Architectures, Security Governance & Operations, IT General Controls, Security Testing, and Cloud Security

Good understandingin enterprise risk management with an emphasis on operational risk management and technology risk

Proficiency in FLOD, SLOD ,TLOD construct with clear understanding of roles

Work Experience

Experience in technology lifecycle of SDLC, SRE/ Technology Support (L1 + L2)

Experience in processing regulatory requirements/ projects and compliance standards in the technology sector

Experience with tools such as Dynatrace, AppD, ServiceNow GRC, SAP GRC, LogicGate, RSA Archer, MetricStream, RiskWatch, any AI tool, observability, automation tools, workflow tools such as selenium etc

Experience with Data Visualization and Reporting tools such as Tableau, PowerBI

Exposure to mainframe or distributed technologies would be an added advantage

Exposure to Enabling functions (Vendor management, GRC, etc),

Exposure to technology risk & control and information security would be an added advantage

Competitive base salaries

Bonus incentives

Support for financial-well-being and retirement

Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location)

Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need

Generous paid parental leave policies (depending on your location)

Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)

Free and confidential counseling support through our Healthy Minds program

Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

This advertiser has chosen not to accept applicants from your region.

Risk & Control/ Consultant Specialist

Bengaluru, Karnataka HSBC

Posted today

Tap Again To Close

Job Description

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Consultant Specialist

In this role, you will:

Monitor key control indicators (KCIs) to track the effectiveness of risk mitigation efforts and report to management.

Provide advice, guidance and assessment of application of policies, control standards, and procedures.

Provide support on initiatives to drive improvements to the Technology control environment, including the effective design of material controls.

Advocate the desired behavioural changes across the CIO community required to mature the understanding and management of technology risk controls.

Assist the management team to Enhance technology control frameworks, ensuring they are effective, adaptable, and compliant with industry regulations and standards.

Contribute to high-level risk assessments to identify and evaluate potential risks, providing insights for informed decision-making.

Collaborate closely with direct leadership to integrate risk considerations into strategic technology planning and decision-making processes.

Stay abreast of emerging technologies and cybersecurity threats, anticipate, and address potential risks.

Have a good understanding of Operational Risk, particularly the key role played by Technology

Requirements

To be successful in this role, you should meet the following requirements:

Bachelor’s degree (or equivalent experience) in Information Technology, Computer Science, or a related field

Knowledge and experience of technology risk management, with a knowledge of control frameworks

Understanding of Technology Risk and Control principles

Analytical and problem-solving skills, with the ability to navigate technology landscapes.

Knowledge of enterprise risk management software and tools

A commitment to continuous learning and staying at the forefront of technology concepts and practices.

Understanding of Technology Evergreening in a large organisation is desirable.

Understanding of Technology infrastructure as used in a large organisation.

This advertiser has chosen not to accept applicants from your region.

Be The First To Know

About the latest Risk management strategies Jobs in India !

Set Email Alert:

Enter your email

Job title

Location