As part of our Technology Risk team, you will be performing IT assessments (IT
General Controls and IT Application Control testing). Working with Technology
Risk team, you will also perform/ provide insights to IT Risk assessment, IT
Governance, ERP reviews, Application control reviews, Cybersecurity reviews and
conduct maturity assessment on the current IT posture.

* Prior experience in assessment, monitoring and reporting of the below
technology risk domains (minimum 4 domains): -

* IT Risk Assessments
* System Acquisition & Lifecycle Management
* Problem Management (Change Management, IT Incident Management, Patch
Management etc.)
* Resilience (BCP, DR, Backup & Recovery)
* Identity & Access Management
* Physical & Environmental Controls
* Third Party Management
* Capacity Management
* Logging and Monitoring

* Conduct technology reviews (performance, capacity, change etc.) and design
reviews of recent applications/enhancement in existing applications, APIs,
infrastructure and identify design gaps.




* Provide recommendations for identifying and measuring key control indicators
and key performance indicators in technology domains to assess and review
performance of critical systems and applications.
* Prepare dashboards for management review.
* Review technical incidents and discuss and conclude root-cause ananlysis
(RCA). Provide recommendation or suggestion to product/application team to
avoid recurrence of the incident.
* Help verify the risks identified by IT stakeholders through self-assessment
and discuss the findings with the internal stakeholders.
* Timely follow-up of open issues and observations flagged by internal audit,
external audit, and regulators
* Identify technology risk on an ongoing basis for existing and new processes
and products, or changes contemplated to existing products and processes.

* Bachelor’s degree in any discipline.
* 8-12 years work experience in IT risk management.
* Minimum 5 years experience in Application design reviews.
* 4-5

📌 Team Member (Mumbai)
🏢 Kotak
📍 Mumbai