Information Security Risk Management Lead - CISM / CISSP / CISA

Information Security Risk Management (IRM) Lead

Location : Bangalore, Chennai, Hyderabad

Experience : 11-15 Years

Employment Type : Full-time

Job Overview :

We're seeking a highly experienced and strategic Information Security Risk Management (IRM) professional to develop, manage, and execute the IRM program across Mashreq Bank. This mid-senior level role is critical in enhancing the bank's resilience by effectively identifying, assessing, and mitigating information security risks, both internal and external. You'll bring sound expertise in information security, robust project management skills, and a proven ability to engage with senior and executive management.

Job Description :

• Develop, implement, and continuously mature the Information Security Risk Management program across the entire organization.
• Play a critical role in effectively identifying, assessing, and mitigating information security risks, stemming from both internal operations and external third parties.
• Manage enterprise-level projects with multiple stakeholders, providing advisory support and ensuring successful outcomes.
• Possess strong experience and knowledge across the broader Information Security and Cyber Security domains, including governance frameworks, policy and procedure development, compliance management, risk management, and security incident response.
• Conduct comprehensive risk assessments, including business impact analysis, threat modeling, and vulnerability assessments.
• Implement and manage Third-Party Risk Management (TPRM) programs, performing detailed supplier risk assessments.
• Maintain and enhance the bank's Information Security Management System (ISMS), ensuring alignment with industry best practices and regulatory requirements.
• Drive the prioritization of security risks and mitigation efforts, making sound, data-driven decisions.
• Collaborate effectively with various internal teams (e.g., IT operations, legal, compliance, business units) and external partners.
• Prepare and present detailed risk reports, findings, and recommendations to senior management and executive leadership.
• Stay updated on emerging information security threats, industry trends, and regulatory changes, integrating new insights into the IRM program.
• Contribute to the development and enforcement of information security policies and standards.

Required Skills & Experience :

(ref : hirist.tech)