IT Operational Risk Management Role - BFS

- Effectively manage IT operational risks pertaining to User Access Mgt. (UAM) & Segregation of Duties (SOD) in various Entities and different business functions
- Report to the senior management periodically on the SOD related activities
- Build risk culture, create awareness and support in various reviews and regulatory requirements
Major Deliverables :
- Identify potential risks and gaps related to user access and SOD including but not limited to role conflicts, data breaches, etc.
- Conduct thorough review of the access matrix & roles designed prior to implementation
- Periodically review & update the SOD Framework

- Maintain application & access universe from UAM & SOD perspective
- Perform periodic sample testing of users & role access
- Building exception reports and reviewing the output for UAM / SOD improvement
- Prepare Risk & Control Matrix and facilitate Risk & Control Self- Assessment (RCSA) and create Key Risk Indicators (KRIs) for various LoBs from UAM & SOD perspective. Assist in Internal Financial Controls review cycle.
- Collaborate with IT, business & support functions to ensure effective risk management practices are integrated into daily operations
- Check compliance with relevant regulatory requirements, industry standards and internal policies
- To conduct other IT process reviews, control testing, etc. and monitor implementation of mitigation strategies (as & when required)
Educational Qualification:
- Post-Graduate with 5-7 (flexible) years of relevant experience in financial sector..
- Desired Experience: Exposure in IT op risk management, Knowledge and implementation of Segregation of duties in a Bank/NBFC. Good understanding of IT systems, networks and security protocols.
Other Desired attributes:
- Good communication, presentation & interpersonal skills.
- Good understanding of Segregation of Duties for access provided in IT application system.
- Strong analytical and problem-solving skills and knowledge on the roles and access in various systems used in Banks/NBFC.
- Ability to interact with senior management & to engage with a diverse group of stakeholders and drive projects within defined timelines
- Knowledge of relevant regulatory requirements and industry standards