Job Summary

An experienced Information Security Risk Manager to strengthen our IS Risk management and control environment. The candidate shall also be responsible for managing audits and ensuring timely compliance including tracking of audit recommendations/findings. The ideal candidate must possess strong IS Risk management experience, preferably within the BFSI sector.

Responsibilities

- Contribute to the development and maintenance of a robust Information Security Risk management framework including Cyber Security, ensuring alignment with regulatory requirements for CACIB India.
- Handling regulatory (primarily Reserve Bank of India) internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders across the globe.
- Coordinate tracking and closure of risk recommendations arising from audits, assessments, & risk reviews, ensuring timely remediation and escalation where necessary.
- Engage with multiple stakeholders, including global teams, to ensure effective implementation of IS Risk management initiatives.
- Establish and ensure implementation of IS Risk policies, procedures, and standards across the organization.
- Perform risk-based deep dives to identify IS Risks, validate root causes for IS-related events, and recommend corrective actions.
- Stay abreast of changes in Indian regulations pertaining to Information Security Risk Management and escalate relevant updates to Head Office (HO) as applicable.
- Participate in and contribute to the implementation of the global control plan.
- Assess and control the Information Security implications of local changes to processes or systems,



ensuring adherence to group policies by coordinating with relevant stakeholders.
- Assist CISO in implementing and maintaining security controls across the organization.

Requirements

- Starting
- Minimum level of study: Bachelor Degree / BSc Degree or equivalent
- Education Qualification: Bachelor of Technology (B.Tech) or Bachelor of Engineering (B.E.) OR
- Bachelor of Science in Computer Science (B.Sc. Computers)
- Preferred Certifications: CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor), ISO 27001 Lead Auditor/Implementer, ISO 31000 Risk Management, COBIT (Control Objectives for Information and Related Technologies), ITIL (Information Technology Infrastructure Library)
- Minimum 8 years of skilled experience in Information Security or related fields, preferably within the BFSI domain.
- Prior experience in handling audits- regulatory (preferably, Reserve Bank of India), internal and external audits including closure of audit recommendations by coordinating with all the relevant stakeholders including IT, preferably across the globe.
- Strong understanding of the Banking regulatory landscape in India.
- Strong Information Security background with knowledge across various domains such as Network Security, Data Security,



Security Operations Center (SOC), etc.
- Prior experience engaging with multiple stakeholders, preferably across global entities.
- Hands-on experience working with IT teams on information security projects.
- Experience in coordinating and tracking recommendations from audits, assessments, and risk reviews to ensure timely closure.
- Minimum experience level: 6-10 years

Skills

- Communication: Excellent interpersonal and communication skills in English (written and spoken) to effectively communicate at all organizational levels, from staff to senior management.
- Analytical Thinking: Strong rational, critical thinking, and reasoning skills.
- Proactive & Motivated: Self-driven with excellent people skills and the ability to work collaboratively.
- Multitasking: Ability to multitask and quickly learn about diverse subjects.
- Technical Proficiency: Advanced user of Microsoft Office tools (Excel, Word, PowerPoint).

IT Tools / Knowledge

- Solid understanding of IS Risk and control frameworks (certifications such as COBIT, ISO 27001, ISO 31000, ITIL, or equivalent are highly preferred).
- Knowledge of IT networks, ISO Controls, NIST framework for IT security, and cyber security controls.
- In-depth knowledge of banking systems, Information System general architecture, and various IT actors (support teams, development teams, etc.).

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Information Security Risk Manager (Mumbai)
🏢 Groupe Crédit Agricole
📍 Mumbai