Job Description

• Position description -
• Act as an Information Risk and Control trusted advisor
• Understand Technology Landscape (Application and Infrastructure) and proactively review Organization\'s information security and related threats and vulnerabilities, legal and regulatory requirements.
• Review and advise on information security risks of vendor offerings - New/leveraging existing (SAAS / PAAS/IAAS) services including integration with Organization environment.
• Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls. Provide respective stakeholders with the IRM requirements and its implementation methodologies.
• Work with Project Managers, Business Analysts, Architecture and Support Team to ensure Organization IRM standards are being followed.
• Ensure all the controls outlined for an application/Infrastructure are designed effectively.
• Review VA-PT results and recommend the risks to be remediated.
• Ensure all the risks are documented, classified and addressed with appropriate action as per the IRM standards.
• Drive education and awareness of Information security related issues and risks to Business/Business IT Teams,
• Support in development of tooling to support IRM processes and ensuring it\'s fit for purpose.
• Actively participate in reviewing and improving the Information Security Controls implemented in the organization.
• Active participate in the Assurance and Architecture level discussions in the engagements.
• Actively participate in IRM team and community meetings, representing IRM and Business interests in applying setting standards and policies for the Group and the businesses, leading to a fit for purpose, evergreen IRM framework.