Job highlights

- 5-7 years of experience in an IT / IS Audit,Assessment,or Information Security role. . Bachelors degree in computer science,management information systems or related field

- CISA certification is must.

- This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week

Role Overview and Core Responsibilities The role ensures effective oversight, regulatory compliance, risk management, and adherence to internal controls while supporting business objectives and decision-making processes. This is a hybrid position and involves regular performance of job responsibilities virtually as well as in-person at an assigned TU office location for a minimum of two days a week.

1. Risk Management

- To conduct RCSAs and maintain Risk Registers for the respective Business Unit. Embed the risk appetite statement and risk limits into day-to-day activities for management of risk.

- Facilitate, partake, and verify the results of the self-assessment process and opine on the departmental/business assessment of risk types, quantification, and frequency.

- Ensure that all operational and enterprise risk issues, its Root Cause and mitigation plans approved by their respective functional heads are brought to the attention of Risk function and the Department/business every month.

- Periodic reporting of risks, Operations Loss, KRI, RAS to the Risks team.

- Review the appropriateness of the design and implementation of risk mitigation strategies.

- Responsible for the timely follow-up, documentation and status of action plans, open issues (Internal Audit, External Audit, Regulator) and other initiatives pending its completion.





- Prioritize control testing based on the level of risk associated with each control.

2.

Compliance

Management

- Responsible for communicating statutory guidelines within Data and Analytics department and other policies from time to time

- Collaborate with leads for timely and accurate regulatory submission

- Support for Sustenance / testing; track, report compliance status of sustenance, testing observations

- Management response coordination and review

- Periodic submissions - Quarterly Compliance Certificate

- Tracking adherence to regulatory circulars and directives

- Regulatory Inspection, tracking and reporting status of observations

- Facilitate / coordinate with stakeholders for compliance closure and evidence submission

3.

Internal Audit

Support

- Audit engagement support

- Tracking and closure of audit observations

4. Oversight and Monitoring

- Conduct governance reviews, assessments, and control effectiveness evaluations

- Track key governance metrics and report findings to senior management

- Monitor remediation of governance-related issues and action plans

- Escalate significant governance concerns to relevant committees

5. Policy and Procedure Management

- Coordinate development, review, approval, and communication of Data and Analytics policies and Standard Operating Procedures to reflect changes in business needs, regulatory requirements, and industry best practices for the function

- Maintain policy inventory and ensure periodic policy reviews





- Ensure that policies and procedures are approved and effectively communicated to relevant stakeholders

6. Stakeholder management

- Liaise with business teams, Risk, Compliance, Audit, and senior leadership

7. Reporting and Analytics

- Prepare governance dashboards and management information (MI) for the function

- Share periodic updates for relevant Committee meetings

- Analyze trends, risks, control gaps, and governance exceptions

Required Knowledge And Experiences

- 5-7 years of experience in an IT / IS Audit, Assessment, or Information Security role.

- Bachelor's degree in computer science, management information systems or related field. CISA certification is must.

- Demonstrated in-depth knowledge of concepts, best practices and controls in a breadth of Information Security areas/domains. These include governance risk management, access control, cybersecurity, physical security, security architecture and design, business continuity/disaster recovery, network security, application operations security and compliance/incident management.

- Demonstrated ability to understand complex technologies, business processes, regulations and emerging risks.

- Solid understanding of SOX legislation and IT frameworks including COSO and COBIT.

- Certification of CA, CPA or CIA (or actively working towards) or other similar certifications would be an added advantage

Experience and Skills

- 5-7 years of experience is required for the role as described above

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 AVP - D&A Governance, Projects & Reporting (Mumbai)
🏢 TransUnion
📍 Mumbai