CSC Global - IT Audit & Risk Manager - Cyber Security Domain

Description :

Role : IT Audit & Risk Manager

Exp range : 12+ years

Work Location : Bangalore

Work timings : 12 to 9pm IST

Work model : Hybrid

Position Summary :

The Cyber Security IT Audit and Risk Manager is an essential role to assist our business with making risk informed decisions.

The position is responsible for supporting the security direction of the business and elevating the companys security posture across multiple jurisdictions.

The position requires an understanding of managing cyber risk in new technologies and legacy systems.

The Cyber Security IT Audit and Risk Manager is expected to support the security strategy of the business within new and existing information system capabilities and responsible for leading internal audit efforts and coordinating with audit partners.

The ideal candidate has a strong IT security audits and risk management background, proven experience of experience in security, compliance, risk management and audit.

The role oversees the business security audit requirements and obligations mandated by standards, regulations and experience developing IT cyber security policies.

In tandem with security leadership, the Cyber Security IT Audit and Risk Manager consistently assesses, audits, and validates the assurance of the security program.

As a primary point of contact for internal and external auditors, the Cyber Security IT Audit and Risk Manager monitors progress and enforces resolution of outstanding issues that may lead to non-compliance or security threats to the business via effective delegation and empowering cross matrixed teams.

Success will be driven by strong servant leadership principles and guidance which compels teams to action.

As a primary point of contact for security risks, you will monitor progress and enforce resolution of outstanding issues that may lead to non-compliance or security threats to the business.

As a key member of the information security team, the role must focus on strong risk management and corporate resiliency, and not be driven solely by compliance.

Essential Job Duties :

• Build relationships with global teams across Business Operations, Compliance, IT and Legal to manage technology risks and regulatory compliance.
• Ensure collection, validation, adequacy and accuracy of information that are submitted to audit partners.
• Customize and manage GRC tools as part of day today work.
• Engage with IT project teams to identify and mitigate cyber security risks and build solutions that are compliant with global regulatory requirements.
• Improve compliance of IT processes and identify opportunities for technology compliance control automation.
• Manage and execute delivery of assigned internal, external, and jurisdictional audits as per published audit plan.
• Design high-quality test plans and direct technology control test activities.
• Build and maintain controls that map to compliance requirements, provide implementation recommendations and monitor evidence.
• Continuously improve the IT Security control framework in alignment with industry trends.
• Contribute to coordination with jurisdictional Business, Risk, Compliance stakeholders and audit partners.
• Keep up to date with external technology and compliance regulations, data privacy and security best practices.
• Define and publish quantitative and qualitative technology compliance metrics.
• Identify strengths and weaknesses in IT technology operations and projects as they relate to privacy, security, business resiliency and regulatory compliance.
• Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation.
• Work in tandem with GRC and business leadership to perform ongoing security program assessments and audits and create annual strategic technology and budgetary directives.
• Monitor current and proposed security changes impacting regulatory, privacy and security industry best practice guidance.
• Apply GRC expertise across key lines of business, including products, practices, and procedures.

Skills And Experience :

Education and Certification Requirements :

(ref : hirist.tech)