Mercedes-Benz Hiring For Governance Risk and Compliance (GRC): Diversity Hiring – Women Candidates Only at Bengaluru / Bangalore Full Time

The main objectives of the Governance Risk & Compliance Lead are to lead the design, development, documentation and communication of governance, risk management and compliance related policies, standards, procedures and enablers in order to drive consistency in approach and output, centralized reporting and improved decision making. More specifically, the Regional Risk & Compliance Lead will be responsible for the design and development of robust operational capabilities in support of risk management (including third-parties), compliance and security training and awareness. As an advisor to markets CIOs and ISOs, the Regional Risk & Compliance Lead will also offer guidance, consultations and decision support for ad hoc requests and inquiries. The Regional Risk & Compliance Lead will oversee the regional GRC function to ensure key compliance metrics and reports are consistently generated, aggregated and reported to the Global CISO, CIO and other executive stakeholders. The Regional Risk & Compliance Lead will also lead the development of cyber security awareness and training programs consistent with global Daimler AG standards and tailored to the needs of the DMO business.

Key tasks

• Policy & Standards Management: Develop and oversee the adoption of a global security policies and standards framework in theregion. In addition, ensure these global policies and standards (and any exceptions to them) are maintained current and relevant and appropriately managed over their lifecycle.
• Information Management: Lead the development of a high-value asset framework, information management controls to drive the proper application of security controls in a manner that is commensurate with the associated risks. Ensure all relevant information repositoroes and sources are updated for effective coverage of security control implementation.
• Risk Management: Coordinate with regional security officers to ensure the timely identification of cyber risk across markets as well as compliance with all appropriate regulatory requirements and internal cyber security policies and standards.
• Communications, Awareness & Training: Lead the development of and oversee regional cyber security training, education, and spread awareness.
• Compliance Management: Report on the effectiveness of governance and compliance activities by collecting and aggregated key risk and compliance metrics globally.

Key Requirements/Knowledge

• Deep understanding of cyber security and the relationship between threat, vulnerability and information value in the context of governance, compliance and risk management.
• Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security tools and procedures.
• An understanding of emerging technology and digital trends and their impacts on cyber security.
• High proficiency with common cyber security management frameworks, regulatory requirements and industry leading practices.
• Strong knowledge of third-party management leading practices and the potential cyber security risks involved in third-party relationships.
• Strong knowledge of organizational training and education policies, processes, and procedures.
• Deep understanding of risk-based decision-making (i.e. risk analysis, mitigation, resolution, acceptance, etc.).
• Deep understanding of the operational impacts of cyber security lapses.
• Good/Excellent project management skills/knowledge to coordinate and drive security projects

Qualifications
Governance Risk and Compliance Experts