About Business line/Function: ISPL Conduct & Control team is primarily responsible for proactive management of Operational Risks through a robust control framework, which aids in effective monitoring & reporting of risks.
Adopt Risk Based Approach on controls.
Understand risks based on past events & proactively implement measures for mitigation wherever possible.
Be a Conduct Representative for ISPL.
Position Purpose
The role is to provide both the Business Units and IT Management with the assurance and visibility that IT Controls are executed in a controlled and managed way. In addition to the specific responsibilities detailed below, the successful candidate will be expected to demonstrate understanding in other areas of Risk & Control Management including strategies surrounding Process Engineering, Configuration Management, Change, Incident & Problem Management, Non-Conformities and Corrective Actions Management, Risk Identification and Control, Project Management and Tools and Methods.
Responsibilities
Direct Responsibilities
Conduct periodic controls assessments across process areas in scope. Raise any non-compliance and follow up of the corrective actions until closure.
Liaise with global and local IT control areas to ensure their certification is timely and appropriate.
Perform periodic Root Cause Analysis of process issues and non-compliances at Project and Application Domain level. Ensure that the exercise is planned, executed effectively and reported to appropriate level.
Participate in minimising production risks and issues, including but not exclusively, by helping to devise, and by implementing, sufficient regular controls.
Ensure appropriate escalation to management and/or Permanent Control (or Compliance as appropriate) as soon as an issue is identified.
The enforcement of Permanent Controls, providing ongoing risk & controls self-assessment status of the control