IT GRC LeadENGIE India • Pune, Republic Of India, IN
IT GRC Lead
ENGIE India • Pune, Republic Of India, IN
14 days ago
Job descriptionAudit Preparation and Management : Prepare processes, teams, and documents for internal and external audits. Track and remediate audit observations with corrective and preventive actions. Risk Management : Manage and track all technology-related risks for timely closure. Oversee formal risk analysis and self-assessment programs for various systems and processes. Compliance : Ensure compliance with privilege access management processes and relevant IT regulations and standards, such as ISO 27001 and NIST CSF. Documentation and Communication : Maintain strong documentation and communication skills. Ensure clear communication with stakeholders and effective conflict resolution. Implementing Initiatives : Coordinate with various departments to ensure smooth execution and monitor progress. Continuous Improvement : Foster a culture of continuous improvement within the IT GRC team. Stakeholder Engagement : Engage with key stakeholders, including management and department heads, to ensure IT GRC strategies are well-supported and integrated. Conducting Risk Assessments : Oversee comprehensive risk assessments to identify potential risks. Developing Mitigation Strategies : Implement controls and safeguards to reduce the likelihood and impact of risks. Monitoring and Reporting : Establish effective monitoring mechanisms and regularly report on risk status to management. Collaboration with Departments : Work closely with various departments to ensure effective implementation of risk management strategies. Adhering to Regulations : Ensure compliance with all relevant IT regulations and standards. Implementing Best Practices : Promote the adoption of industry best practices within the organization. Internal and External Audits : Conduct regular internal audits and manage relationships with external auditors and regulatory bodies. Policy Development : Develop and maintain comprehensive IT GRC policies. Cross-Departmental Collaboration : Collaborate with various departments to ensure effective implementation of GRC initiatives. Stakeholder Communication : Ensure stakeholders are informed about the progress and impact of GRC activities. Conflict Resolution : Resolve conflicts that arise during the implementation of GRC initiatives. Internal Audits : Conduct internal audits to assess the effectiveness of IT GRC controls and processes. Managing External Audits : Ensure the organization is well-prepared for external audits and address any findings promptly. Audit Preparation : lead the preparation for audits to ensure a smooth process. Addressing Audit Findings : Develop and implement action plans to resolve audit findings and prevent recurrence. Continuous Improvement : Use audit insights to drive continuous improvement in GRC practices. Regular Reporting : Provide regular reports on IT GRC activities to management and the board. Clear Communication : Ensure GRC-related information is communicated clearly and consistently. Training and Awareness : Promote awareness of GRC policies and practices within the organization through training sessions and resources. Understanding IT Systems : Strong understanding of IT systems, including Cloud services, IT-OT convergence, hardware, software, networks, and data management practices. Security Principles : Deep understanding of security principles, including encryption and access control. Risk Management Frameworks : Familiarity with frameworks such as ISO 31000 and NIST RMF. Emerging Technologies : Stay updated on emerging technologies and their impact on IT GRC practices. Technical Certifications : Relevant certifications such as CRISC are valuable. Compliance Knowledge Regulatory Requirements : Deep knowledge of relevant regulatory requirements, such as CEA guidelines, Internal Controls (ITGC), IT Act, Indian and global Energy sector compliance, GDPR, HIPAA, and SOX. Industry Standards : Familiarity with industry standards like ISO 27001 and NIST CSF. Compliance Assessment : Conduct regular compliance assessments and develop comprehensive compliance policies. Training and Awareness : Promote awareness of compliance requirements within the organization. Risk Analysis : Conduct formal risk analysis to identify potential vulnerabilities. Problem-Solving : Develop and implement effective solutions to mitigate risks. Data Analysis : Analyze data to identify trends, assess risks, and make informed decisions. Decision-Making : Make informed decisions based on risk and compliance analysis. Continuous Improvement : Promote a culture of continuous improvement in GRC practices. Strong background in Information Technology, Cybersecurity, or a related discipline. Knowledge of frameworks like ISO 27001, NIST, GDPR, and HIPAA. 5-8 years in IT GRC, preferably in the Energy sector. Hands-On Experience : Identifying, assessing, and mitigating risks. Practical Application : Applying GRC principles in energy sector Location : Pune, India, with intermittent travel to sites. Team Size : Individual Contributor role. Physical Activity : Extended periods of concentration, technical hands-on work, and physical activity during site visits. Reports to : Cyber Security & IT Infrastructure Manager
The Deputy Manager - IT GRC (Governance, Risk, and Compliance) role at ENGIE India is crucial in ensuring the organization's Digital & IT landscape is secure, compliant, and aligned with business objectives. This role involves developing, implementing, and managing IT GRC, risk management, and ensuring compliance with regulations and internal controls. This is an individual contributor role based in Pune, India, with occasional onsite travel to support Digital & IT audits.
Main Objectives
The primary objective is to ensure the IT landscape is secure, compliant, and aligned with business goals. This involves :
- Implementing comprehensive IT GRC strategies.
- Implementing INCOME framework for D&IT function
- Implement and Manage - Risk management processes.
- Ensuring adherence to regulations and standards.
- Maintain Digital &IT internal control requirements
- Lead the Digital & IT Internal Control and Compliance
Key Responsibilities
Coordination and Collaboration
Technical Knowledge and Skills
Analytical and Problem-Solving
Qualifications and Experience
Work Environment & Physical Requirements : -
Why Join ENGIE?
As a Deputy Manager IT-GRC at ENGIE, you will play a pivotal role in safeguarding and improving the Digital & IT landscape of a global leader in energy and sustainability. Drive ENGIE’s mission to achieve a carbon-neutral world through innovative technology solutions. Join us to contribute to a sustainable future and be part of a transformative journey towards a more efficient and eco-friendlier world.
Visit us at www.Engie.Com and www.Engieindia.Com
Create a job alert for this search
It Lead • Pune, Republic Of India, IN
Related jobs
)
Sap Idm & Grc Consultant
Tata Consultancy Services • Republic Of India, IN
SAP GRC Implementation : Design, configure, and implement SAP GRC modules like Access Control, Process Control, and Risk Management.
SAP IDM Implementation : Automate user provisioning and de-provisio...Show more
Last updated: 10 days ago • Promoted
Deputy Manager - It Grc (Governance, Risk, And Compliance)
ENGIE India • Pune, Republic Of India, IN
Deputy Manager - IT GRC (Governance, Risk, and Compliance) role.ENGIE India is crucial in ensuring the organization's Digital & IT landscape is secure, compliant, and aligned with business objectiv...Show more
Last updated: 14 days ago • Promoted
IT Procurement Lead
Invest India • New Delhi, Republic Of India, IN
Invest India is the National Investment Promotion and Facilitation Agency under the Department for Promotion of Industry and Internal Trade (DPIIT), Ministry of Commerce and Industry, Government of...Show more
Last updated: 16 days ago • Promoted
Cyble - GRC Lead
Cyble • India
Description : About Cyble : Cyble is revolutionizing the landscape of cybersecurity intell...Show more
Last updated: 30+ days ago • Promoted
SAP GRC ( Access Control, security admin & ERM) - Location : Bangalore
DigiHelic Solutions Pvt. Ltd. • India, India
SAP GRC ( Access Control, security admin & ERM).SAP GRC (Access Control, ERM & Security Admin).Strong experience in SAP GRC Access Control 10.
Hands-on expertise with ARA, ARM, EAM, BRM modules.Expe...Show more
Last updated: 6 hours ago • Promoted • New!
Grc Executive / Grc Manager
ShieldByte Infosec Pvt. Ltd. • Republic Of India, IN
Cybersecurity, IT Security, IT Audit.We are seeking Governance, Risk, and Compliance (GRC) professionals to join our team as GRC Executive / GRC Manager.
The role involves risk assessment, regulator...Show more
Last updated: 5 days ago • Promoted
SAP GRC Authorization Expert
YASH Technologies • Pune, Republic Of India, IN
Founded in 1996, YASH Technologies is a global technology integrator and one of the largest independent SAP partners worldwide.
Headquartered in the USA, with.Manufacturing, Life Sciences, BFSI, Min...Show more
Last updated: 10 days ago • Promoted
Freelance SAP GRC Access Control Consultant
ThreatXIntel • India, India
ThreatXIntel is a cybersecurity startup specializing in delivering customized, cost-effective solutions to protect businesses and organizations from cyber threats.
Our team of experienced profession...Show more
Last updated: 1 hour ago • Promoted • New!
SAP GRC Implementation Specialist
KPMG India • Republic Of India, IN
KPMG entities in India are professional services firm(s).These Indian member firms are affiliated with KPMG International Limited.
KPMG was established in India in August 1993.Our professionals leve...Show more
Last updated: 25 days ago • Promoted
GRC & Infosec Lead
NPCI Bharat BillPay Limited • Republic Of India, IN
Job Description – GRC (Infosec).The selected candidate will lead the development, implementation, and continuous improvement of the organization's governance, risk management, and compliance framew...Show more
Last updated: 17 days ago • Promoted
SAP GRC / IDM Solutions Consultant
Tata Consultancy Services • Republic Of India, IN
SAP GRC Implementation : Design, configure, and implement SAP GRC modules like Access Control, Process Control, and Risk Management.
SAP IDM Implementation : Automate user provisioning and de-provisio...Show more
Last updated: 7 days ago • Promoted
GRC Solutions Architect
KPMG India • Republic Of India, IN
Experience in SAP GRC and SAP Security working in SAP ECC environment and GRC Implementation Experience.Experienced working with different types of reports in SAP GRC Access Controls.Knowledge of S...Show more
Last updated: 2 days ago • Promoted
Senior Role - Grc & Infosec
NPCI Bharat BillPay Limited • Republic Of India, IN
Job Description – GRC (Infosec).The selected candidate will lead the development, implementation, and continuous improvement of the organization's governance, risk management, and compliance framew...Show more
Last updated: 17 days ago • Promoted
SAP GRC Specialist
KPMG India • Republic Of India, IN
Experience in SAP GRC and SAP Security working in SAP ECC environment and GRC Implementation Experience.Experienced working with different types of reports in SAP GRC Access Controls.Knowledge of S...Show more
Last updated: 2 days ago • Promoted
IT Risk and Compliance Manager
ENGIE India • Pune, Republic Of India, IN
Deputy Manager - IT GRC (Governance, Risk, and Compliance) role.ENGIE India is crucial in ensuring the organization's Digital & IT landscape is secure, compliant, and aligned with business objectiv...Show more
Last updated: 14 days ago • Promoted
Deputy Manager - IT Governance, Risk & Compliance
ENGIE India • Pune, Republic Of India, IN
Deputy Manager - IT GRC (Governance, Risk, and Compliance) role.ENGIE India is crucial in ensuring the organization's Digital & IT landscape is secure, compliant, and aligned with business objectiv...Show more
Last updated: 14 days ago • Promoted
IT Controls & Governance Manager
Smart IMS Inc. • Republic Of India, IN
Singapore to join our team, supporting a global investment bank.The role will sit within the APAC Risk & Controls function of the bank, which works with Application Managers, Enterprise Control fun...Show more
Last updated: 7 days ago • Promoted
IT Service Delivery Lead
Inspirisys Solutions Limited (a CAC Holdings Group Company) • Chennai, Republic Of India, IN
A Project Delivery Manager for End User Services is responsible for overseeing the delivery of IT services and support to end users & Enterprise Delivery.
This role involves managing projects, coord...Show more
Last updated: 7 days ago • Promoted