Job Description

Role Description:
o Within the central division Group Technology (GT) / Risk & Security (RnS) - Operating Office & Transformation
(IT1.6.1).
o Operating Office & Transformation is the enabler and accelerator for driving the Group Technology (GT) Risk &
Security mission through building sustainable, effective and efficient run and change capabilities and connecting dots
between demand/risk, priorities/capacities/budgets and strategic change management.
o IT Risk Coordination and Security Risk Control (IT 1.6.1.3) objective is to serve as one stop shop for GT risk
governance, RnS tower commitment governance, and Supply Chain Information Security Risk. .
o The IT Risk Officer is responsible for coverage across GT functional organization and reports directly to the Head of IT
Risk Coordination & Security Risk Control (IT 1.6.1.3). The officer manages key relationships including but not limited
to Munich Re's Integrated Risk Management (IRM), Group Legal and Compliance (GCL), Central Procurement (CP),
and Third Party Business relationship Managers.
o The IT Risk Officer has the primary responsibility for assessing Information Security Risk of Third Parties. The role is
based in Mumbai.
Key Accountabilities & Responsibilities:
o Responsible for Information Security assessment of Third Parties within MR Group. This includes support for security
assessment within tenders and for new Third Party partnerships as well as ongoing/periodic risk assessment of
established Third Party providers.
o Supports MR Group risk management regulatory obligations in the field of Third Party Risk management.
o Supports team success by contributing to continuous improvement.
o Provides cover for IT risk officers in other areas.
o Foster and contribute to global collaboration within RnS and more broadly in GT and MR Group.
Key Competencies & Skills required
Technical Skills:
o
IT Risk Management, Third Party Risk Management, Vendor Risk Assessments
Nice to have: o Expert knowledge in IT Risk and Information Systems Control, IT Security and
Compliance programs, Data Protection principles and practices. 2+ years of
relevant professional experience in Third Party Risk Management is preferred
o Expertise in relevant laws and regulations, applicable to financial service
organizations/reinsurers
o Proven experience in successfully managing business and partner relationships
o Calmness and clarity of thought under pressure with ability to maintain
confidentiality and oversee and handle multiple requests at the same time
o A highly motivated person focusing on personal development, enablement with
cultural awareness

For internal use only/Internal (C2)
o Excellent command of business English
Behavioral Skills:
o Good interpersonal, communication and organizational skills relevant to the role.
o Willingness to learn and quickly adapt to changing requirements.
o Proactive approach to identifying issues and presenting solutions and options
o Ability to direct and guide teams as relevant
Previous Experience & Qualifications
Minimum Educational
Qualification:
o Bachelor's or Master's degree in Computer Science /Engineering/Information
Technology
o Candidate with non-computer science degree must have minimum 1 year of
relevant experience
o MBA in IT / Insurance/Finance can also apply for Requirements Engineer and
Test Engineer role.
Certification if any:
o Certified in one or more relevant industry recognized certification such as
CTPRA/CTPRP, CISM, CRISC, CISSP, CGEIT, ITCM, or other relevant industry
certification.
Years Experience & Knowledge: o
2+ years in IT Risk and TPRM

Skills Required