Mashreq Looking for Assistant Vice President – Technology (GRC Technology) at Bengaluru, Karnataka, India Full Time

Lead the Technology GRC Support function.

This role is responsible for managing and supporting Technology Governance, Risk Management and Compliance initiatives for Technology team. This role has a substantial impact on the Technology Stream and is geared towards supporting information security risk mitigation, internal / external audits coordination and validation of IT Risks & controls.

Key Result Areas:–

• Provide coordination and support between Technology units and Information Security Group (ISG).
• Audit Governance – Provide support to internal, third-party and statutory auditors and coordinate with various Technology teams
• Review the audit items remediation plan and closure artifacts.
• Review the Risks & Controls Self-Assessment, Operational Risk Events, New Product & Process Approvals.
• Ensure stakeholder engagement is adequately governed, with periodic reviews and escalations.
• Monitor the controls established to mitigate the risk. Work with stakeholders from various teams to ensure that the risks are tracked and closed in a timely manner.
• Manage the team of Technology GRC advisors
• Govern, report and follow-up with Technology and Information Security units on closure of deliverables and action items.

Knowledge, Skills and Experience

• Should have 12 to 15+ years of experience in IT GRC, Information Security and IT Audits.
• CISSP / CGRC / CISA / CISM / CRISC / ISO 27001:LA – Minimum of two certifications is mandatory.
• Proficient technical skills, including Information Security Risk Assessment, IT General Controls, Vulnerability Management, IT Asset Management and Project management practices.
• The candidate must be able to multitask, handle changing priorities and work independently in a fast-changing environment. Scope will include metrics reporting, action tracking and responsibility for the delivery of short-term initiatives.
• The candidate must be able to communicate and engage effectively with all levels of management across both technology and business areas, being able to articulate the risk exposure, advise stakeholders of the mitigation requirements status as well as providing clear and concise updates on various key projects.