Risk Management Specialist

Our clients face numerous risks that threaten their financial stability and operational efficiency. We help them mitigate these risks by providing expert risk management services.

The role of a Risk Management Specialist is to identify, assess, and prioritize business and technology risks. This involves working closely with clients to understand their business environment and risk management approaches.

The ideal candidate will have a strong understanding of IT security policies and procedures, network architecture review, security configuration review of network devices, firewall, endpoints, MDM, DLP, cloud infrastructure, vulnerability assessment, Endpoint protection, Threat monitoring.

They will also have experience in testing controls for technology platforms such as Database Systems, Oracle, SQL, and DB2, Operating Systems, LINUX, UNIX, AS400, Windows, and Solaris.

The successful candidate will be able to manage end-to-end engagements for support on IT Internal Audit, Cyber, Information Security Audit from planning to conclusion. They will also be responsible for managing engagements with a team size of 4-5 members.

A key aspect of this role is the ability to communicate complex technical information to non-technical stakeholders. The candidate will be expected to generate innovative ideas and challenge the status quo.

We are seeking a highly skilled and experienced Risk Management Specialist to join our team. If you have a passion for risk management and a desire to make a real impact, we encourage you to apply for this exciting opportunity.

Key Responsibilities:

• Assist clients in identifying and evaluating business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement.
• Assist in the selection and tailoring of approaches, methods, and tools to support service offering or industry projects.
• Facilitate the use of technology-based tools or methodologies to review, design, and implement products and services.
• Understand clients' business environment and basic risk management approaches.
• Project Management, decision making with engagement management, and seek to understand the broader impact of current decisions.
• Lead engagement planning, economics, and billing.
• Generate innovative ideas and challenge the status quo.
• Participate in proposal development efforts.
• Assist in pre-sales activities.
• Manage relationships with clients with the intention to exceed client expectations.

Required Skills and Qualifications:

• B.E./B.Tech in Computer Science, Information Technology, or related fields, and/or MBA with IT.
• Must have 5-7 years of experience in the areas of IT audits, Cyber, Information security audits, IT Financial Audit, and Business Automated Controls for Mutual Funds, Banks, NBFCs, Trading Organizations.
• Must have hands-on experience or led projects to comply with regulatory requirements, international standards like RBI, SEBI, IRDAI, PCI DSS, ISO 27001, and good practices, COSO, COBIT, relating to Information security.
• Knowledge of IT security policies and Procedures, network architecture review, security configuration review of network devices, firewall, endpoints, MDM, DLP, cloud infrastructure, vulnerability assessment, Endpoint protection, Threat monitoring.
• Well-versed with testing controls for technology platforms such as Database Systems, Oracle, SQL, and DB2, Operating Systems, LINUX, UNIX, AS400, Windows, and Solaris.
• Must have Excellent English skills, excellent presentation skills, excellent soft-skills, influencing, negotiation.
• Managed end-to-end engagements for support on IT Internal Audit, Cyber, Information Security Audit from planning to conclusion.
• Managed engagements with a team size of 4-5 members.
• Experience in preparation of Business Development presentations, proposals.
• Must be open to travel.

Preferred Certifications:

• CISA, CISSP, CISM, ISO27001, CEH required.