Risk Control Assessment

Service Now GRC

Primary Skills

- 5+ years of hands-on experience with controls management and related lifecycle, including design, implementation, validation and operational effectiveness testing.
- Third party risk and control assessment experience
- Experience managing stakeholders across a variety of seniorities and technical understanding, with the ability to explain and educate stakeholders on IT risk and controls and related topics
- Ability to work under time pressured conditions against deadlines whilst achieving or exceeding KPIs measuring completion of testing and assessments work
- Business level fluency in spoken and written English

Secondary Skills

Ability to read and explain (to non-IT colleagues): technical diagrams (service or application), data flows, technical solution documentation.

Good understanding of core IT risk and control areas, such as IT Incident Management, Security Incident Response, IT Problem Management, IT Change Management, IT Resilience, Business Recovery

Experience working with ServiceNow GRC (Governance, Risk and Compliance) tooling and JIRA

Good to have





IT risk and control related certifications, such as ISO27001, CRISC, CISM, CISA or CISSP

Knowledge of risks and controls commonly found in the Financial Services sector, such as those related to GDPR, DORA, ISF Standard of Valuable Practice, NIST CSF, PCI DSS and PSD2

IT-related academic background (experience information systems, and network design, cloud infrastructure, system administration or similar).

JD

As a member of TRAC, you will be part of the team that offers technology risk assessment and advisory services for the Bank. From a functional perspective you will help manage and conduct technology risk assessments with service owners who are our key stakeholders, as well as consult on a wide range of recent and emerging technology risk areas as part of various strategic initiatives. You will also support identification, assessment and registration of controls which have a mitigating effect on technology risk as part of the IT Risk and Control Self-Assessment process service.

📌 Risk Control Assessment (India)
🏢 Infowaysolutions
📍 India