IS Risk Manager

Job Title

IS Risk Manager

Business Unit

ISG

Reporting To

Unit Heads

Job Function and Role Type

Risk & Compliance, Individual Role, Light Travel

Version No

1.0

Job Purpose

Responsible for enterprise and project risk assessment, merchant onboarding security assessment, information security governance, merchant PCI DSS compliance, phishing fraud management, business continuity management, and regulatory reporting compliance.

Key Responsibilities

Infosec risk mgmt. & application security

Ensure compliance with application security standards for enterprise applications; Execute PMO activities, including stakeholder engagement, evidence validation, and tracker preparation; Review compliance for in-house applications and manage related PMO activities; Evaluate risk-related changes and provide advisory.

Third Party IS Risk mgmt, governance & merchant Pci Dss compliance

Develop and review information security policies, standards, and guidelines; Execute third-party risk management programs, including assessments and risk remediation; Manage merchant PCI DSS compliance deliverables and provide regulatory advisory; Track and report on security projects and escalate issues as needed; BCM and Compliance Mgmt; Develop and maintain a corporate-wide business continuity framework; Create and update BCP/DR documentation and test calendars; Liaise with business units to ensure effective BCPs and crisis management; Ensure compliance with regulatory reporting requirements, including RBI submissions.

BCM and Compliance mgmt ..

Education:

Bachelor’s degree in Science, Engineering, BCA, or MCA.

Certifications:

CISA, CISSP, ISO 27001.

Key Competencies

Risk assessment, compliance management, stakeholder engagement, analytical skills, communication skills.

Major Stakeholders

Internal IT teams, business continuity coordinators, regulatory bodies, and merchant services teams.