Lead-IT & ISG, ORM

Role / Job Title:Lead - IT & ISG Governance, Operational Risk

Function/Department:Enterprise Risk Department - Operational Risk Management

Job Purpose:

ORM is the second line of defence which ensures all the Risk highlighted by the Business are effectively being monitored and relevant controls are in place to mitigate the Risk. The role is responsible to lead the ORM activities of the Information Technology & Information Security Governance vertical of the Bank.

Roles & Responsibilities:

• The primary responsibilities would be to assess, measure, monitor and control and report operational risks (OR) and evaluate whether the risk management practices are in line with the operational risk framework and policies.
• Activities includes but not limited to:
• Defining Standard Operating Procedures (SOPs), Risk Registers, KRIs and monitoring them.
• Review of the process and highlight key operational risk and control to mitigate and monitor residual risk.
• Analysing of Incidents being reported and verifying the Corrective and Preventive actions.
• To conduct the Risk & Control Self-Assessment for various units and publish major issues and recommendation basis testing results.
• Review and approve new product/product variant rollouts prior to launch and highlight operational risks associated as part of forward-looking risk management.
• Conduct ad-hoc thematic reviews basis directions from various Committees / Businesses for IT & ISG domain of the bank.
• Support the Operational Risk Head to manage and constantly enhance the Operational Risk Management Committee reports to ensure the dashboard on risk performance is well developed and appropriate.
• Manage and participate in various Business Operational Risk Management committees and ensure risk profile of the IT & ISG functions are monitored and reported in line with the framework.
• Own and drive the process of embedding the operational risk framework throughout the IT & ISG areas and contribute to the risk and control culture of the organization through knowledge sharing and awareness on the importance of risk management.
• Give quality advice, guidance, and training to the business lines so that the business owners and BORM's can manage its risks and meet its regulatory obligations.
• Required Skills:
  • Shall have good knowledge and experience of Information Technology (IT) applications and IT/Information Security risks and controls review.
  • Technical, functional knowledge and experience of working in risk team and have relevant experience of working in IT and ISG areas including Digital Payment channels for e.g., Internet Banking & Mobile banking, UPI, IMPS, RTGS, NEFT, Swift etc.
  • Shall have good knowledge and understanding of Third party/vendor involvement and various fintech models involved in digital banking space.

Education / Qualifications:

Graduation: BTech (Bachelor in Technology) / BE (Bachelor in Engineering) / BSc (Bachelor of Science)

Post Graduation: MBA (Master of Business Administration) / MTech (Master in Technology) / ME (Master in Engineering)

Professional Degree / Certification: CA (Chartered Accountant)

Experience:10 - 18 years of relevant experience.