Job Description: Job Title: PMO Risk Reduction and Service Owner for Key Vendors
Corporate Title: VP
Location: Pune, India
Role Description
- The Project Manager - Risk reduction is responsible for leading risk and audit remediation initiatives for Hybrid Cloud Infrastructure division. This includes managing end to end delivery of risk mitigation plans, ensuring timely closure of audit findings and strengthening control environments. Strong project management, stakeholder engagement and risk oversight are key success to the role.
- The Service Owner (SO) is responsible for managing the entire lifecycle of third-party relationships within the organization. This role involves ensuring that all risk assessment tasks and activities are completed accurately and in a timely manner, overseeing the selection and screening of third parties, and ensuring compliance with regulatory requirements. The SO will work closely with various stakeholders to mitigate risks, manage subcontractors, and ensure continuous risk monitoring.
What we ll offer you
As part of our flexible scheme, here are just some of the benefits that you ll enjoy,
- Best in class leave policy.
- Gender neutral parental leaves
- 100% reimbursement under childcare assistance benefit (gender neutral)
- Sponsorship for Industry relevant certifications and education
- Employee Assistance Program for you and your family members
- Comprehensive Hospitalization Insurance for you and your dependents
- Accident and Term life Insurance
- Complementary Health screening for 35 yrs. and above
Your key responsibilities
Project Manager - Risk Reduction :
- Promote risk awareness, encourage prioritization of risk remediation, process re-engineering and strategic risk management
- Provide processes for systematic, proactive, and forward-looking risk identification, risk assessment, monitoring, reporting and keeping GTI risk profile up to date
- Plan and execute thematic risk assessments and input into risk scenario testing and macro threat assessments
- Identify material remediation priorities for GTI and key cross divisional priorities impacting GTI (control / remediation book of work)
- Track project status, maintain action logs, and ensure documentation
- Be a catalyst and an enabler to the global leadership for achieving the objectives in line with changing regulatory and industry operating landscape and reducing risk against overall technology operations portfolio
- Ensure management transparency by way of timely risk reporting and proactive engagement and representing controls team at different governing forums
- Ensure alignment with internal risk frameworks and regulatory expectations.
Service Owner
- Risk Assessment and Management: Complete risk assessments, ensure proper screening, and report third-party issues.
- Regulatory Compliance: Nominate Local Service Owners and ensure compliance with local regulatory requirements.
- Third-Party Selection and Screening: Select third parties, consider risk aspects, and review screening outputs.
- Control Assessments and Mitigation: Ensure third parties complete required tasks, develop continuity plans, and manage risk mitigation actions.
- Continuous Monitoring and Termination: Update risk assessments, perform post go-live controls, and execute termination strategies.
- Contracting and Payment: Complete risk assessments before service commencement, ensure contractual clauses are included, and execute risk process activities for contract renewals or amendments.
Stakeholder Management - Identify, Partner, and Collaborate
- Establish relationship with external and internal Audit teams to ensure effective and robust challenge to finding and to establish smart management action plans.
- Partner with 2nd LoD functions within the bank to ensure alignment towards Group wide minimum control standards
- Collaborate closely and proactively with Divisional Control teams and Embedded Risk teams to manage the audit finding lifecycle
- Promote and support proactive IT/IS risk culture at the Bank
Your skills and experience
- Overall experience in similar roles for 5-8 years in a global Bank withing Technology division or IT/IS audit
- Minimum 5 years of experience within Risk and Control domain steering technology risk framework / control implementation in a global organization
- Proven experience in Project management in Risk related programs, including managing vendor governance in a global organization
- Good understanding of Industry best practices such as NIST, COBIT, ITIL and ISO 27001 etc
- Deeper understanding of industry wide risk landscape and regulatory expectations
- Cloud Computing Technology (GCP, AWS, Azure etc.) certifications or similar domains
- Other professional qualifications and certifications in Technology risk management
How we ll support you
- Training and development to help you excel in your career.
- Coaching and support from experts in your team.
- A culture of continuous learning to aid progression.
- A range of flexible benefits that you can tailor to suit your needs.