Cyber/IT Security

Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Banks operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Job Purpose
The purpose of this job role is to manage Third party risk assessment of the vendors/partners in alignment with Bank Security Policies, Cyber Security Threats and Industry standards.

Key Accountabilities
Conduct Third party risk assessment for newly onboarding vendors in alignment with Bank Security Policies and standards.
Periodic risk assessment review of the outsourced partners.
Periodic update to management on the review outcome and improvement areas.

Job Duties & responsibilities
Conduct third party risk assessments in alignment with Bank Security Policies and Industry Standards
Perform on site assessments/offline review over collaboration channels of vendors/partners to identify opportunities for improvement
Provide input and aid in the development of policies/procedures focused on the security of third-party business processes
Develop and maintain vendor/partner risk and control monitoring plans, performing monitor activities and analysis of evidence to determine controls are operating effectively
Complete monitor and control tasks triggered by periodic Third-Party review assessments
Collaborate with the line of business stakeholders to deliver third party review outcome and improvement areas in timely manner
Assist in development and execution of partner strategies
Develop and manage a third-party risk management monitoring and reporting process that tracks third party risks
Periodic update to be presented in various forums to management

Required Experience
Overall 6+ years on experience in Information/Cyber Security/ATM security
Experience in third party risk assessment for 4+ years
Candidate should have Cloud experience
Candidate should have worked in BFSI (preferred)
Solid understanding of information technology and security solutions

Education / Preferred Qualifications

Graduation: BE IT/Computers/Electronics, B.Sc. - Computers, M.Sc. - Computers
Post-Graduation: PGDIT, MCA, MBA
Third-party risk assessment (Preferred)

Core Competencies
Excellent analytical and decision-making skill sets
Effective in Communication, documentation and report writing skills
Ability to consult and validate solutions to mitigates risks to business and systems

Technical Competencies
Technical Working knowledge (Host Security, Network Security, and Physical Security).
Cryptography
Cloud Security (AWS/Azure/Google)