Key Accountabilities and Responsibilities

- Support and drive key ICS Strategic and Risk Management initiatives across all business domains, as defined by objectives, and see them through to completion
- Support the development of the ICS Risk Management Strategy, as well as the evolution of the overall ICS Strategy from the focus point/driver of reducing risk to within acceptable/tolerable levels
- Support the definition, implement and maintenance of the Risk Management Framework in an ever evolving and changing risk landscape
- Create and communicate supporting artefacts regarding strategic development and risk management i.e. Documented processes, strategies, milestones, risk actions, KPIs
- Capture, develop and present relevant ICS metrics and reports for management information as required, to articulate tangible risk reduction progress
- Support the Policy Exception process from a risk perspective
- Receive, manage and progress risk and strategy related tickets/business queries
- Develop companywide (including 3rd party), best practices and processes for Information Security risk
- Support IT and the business in documenting, sizing and planning responses to Information Security risk in adherence to documented policies, standards and procedures, providing Education & Awareness on these where relevant
- Conduct risk assessments across business and IT domains and work with product/service managers to ensure effective management of these risks
- Maintain and evolve risk management systems and data quality to ensure accurate reporting
- Research and consider policy, standard and process enhancements across the GRC space with the view of further reducing risk
- Any other activities as reasonably directed by management.





Key Interactions- This role will develop and maintain relationships with outside their own immediate team

- ICS Team
- Senior IT & Business Leadership
- Office of the General Counsel
- Corporate Security & Business Protection
- Enterprise Risk
- Product Engineering
- JLR Affiliates and Subsidiary companies
- Supplier Management/Purchasing
- IT Program & Project Delivery
- IT Service Delivery
- IT Comms
- IT Domains (Product Managers)
- Enterprise Architecture
- Specialist Security Agencies
- External vendors
- Delivery partners
- Analyst organizations / consultancies / third parties

Knowledge, Skills and Experience Essential:

- Understanding of Information Security processes, functions and practices, particularly in the GRC space
- Understanding and experience managing and assuring security controls
- Proven analytical skills with the ability to manage simultaneous priorities under pressure and in line with changing deadlines.
- Strong analysis skills, Excel expert with experience creating insight from analysis and data.
- Able to present a professional, approachable image of Information Security to all stakeholders through verbal and written interactions
- Exceptional customer service skills and abilities.
- Proven experience in working with external global third party vendor and Managed Services Providers including software vendors
- Strong analytical, problem solving, persuasion negotiation,



and conflict resolution skills with a strong sense of
- urgency, without the requirement for explicit deadlines
- Good understanding of relevant industry standards and frameworks (e.g. GDPR, COBIT, NIST, ISO 27001)
- Desirable:
- Previous Security team experience working within the GRC space would be beneficial
- Experience of authoring governance documentation (standards, policies, reporting, proposals, analysis)
- Experience of authoring governance documentation (standards, reporting, proposals, analysis) Powerpoint expert with experience of creating presentations for senior stakeholders
- Experience or knowledge of Agile practices (e.g. SAFe, SCRUM)
- Degree or equivalent experience.
- Knowledge and experience in managing information security in a highly regulated business (Financial Services, Pharma)
- Knowledge and experience in Information Security Auditing Techniques
- Certifications : CRISC, CISM, CISSP.
- Experience gained in consulting or working in service provider workplace
- Experience of working globally, culturally astute and sensitive.

Essential:

- A strong team player who owns their agenda and is able to work with light touch supervision.
- An ability to work collaboratively, with experience of working with external third-party vendors and service providers.
- Proven analytical and problem-solving skills.
- Good stakeholder experience, able to engage using in plain and technical language as befits the audience.
- Outcome driven, demonstrating tenacity and drive.
- Good communication skills, with a professional and approachable demeanor.
- Customer centric, easy to do business with and makes people feel special. Delivers experiences that are personalized, transparent and dependable.

📌 Senior Risk Analyst (Bengaluru)
🏢 ONZESTT SERVICES INDIA PRIVATE
📍 Bengaluru