Infrastructure Coverage

**Job Title - Information Security & Technology Risk - Risk Specialist**

**Location - Mumbai, India**

**Corporate Title - AVP**

The Information Security & Technology Risk team is a 2nd Line of Defence (LoD) unit of the wider Non-Financial Risk Management (NFRM) area within the Chief Risk Office (CRO).

The team provides several Technology Risk management services to the Group through approx. 18 staff located across key global hubs. These include (and not limited to):

- design and implementation of the Information Security & Technology Risk Framework.
- defining and monitoring the Group, Division and 52 Business Unit’s IT & IS Risk Appetite through key risk metrics.
- supplying expertise on key security, stability & resiliency topics through continuous engagement with 1st LoD stakeholders.
- input, review and challenge into the design and implementation of the Banks major technology investments and risk reduction programmes.
- Providing senior management with risk expertise on current and emerging information security and technology topics (e.g. cloud transformation, digital assets, payment technology advancements, service orientated architecture, operational resilience)
- implementation of minimum control standards the Group must operate against
- oversight of the 1st Line of Defense execution of the Information Security & Technology Risk Risk Framework
- independent risk and control assessments
- continuous engagement with key regulators on Information Security & Technology Risk matters.

**What we’ll offer you**

As part of our flexible scheme, here are just some of the benefits that you’ll enjoy
- Best in class leave policy
- Gender neutral parental leaves
- 100% reimbursement under childcare assistance benefit (gender neutral)
- Sponsorship for Industry relevant certifications and education
- Employee Assistance Program for you and your family members
- Comprehensive Hospitalization Insurance for you and your dependents
- Accident and Term life Insurance
- Complementary Health screening for 35 yrs. and above

**Your key responsibilities**
- Supporting the Production, Development and Presentation of the Banks Information Security & Technology Risk Metrics.
- Supporting various regulatory requirements on Information Security & Technology topics at the global, region and country level.
- Assessing the impact of major Technology transformation projects to the banks Information Security and Technology Risk Profile.
- Supporting the team with dedicated coverage of a specific Business Division and/or Region on all Information Security & Technology Risks.
- In addition, the Risk Specialist will be asked to contribute to wider cross team activities within NFRM through the lens of Information Security & Technology such as Operational Resilience & Third-Party Risks.

**Your skills and experience**
- Experience with some of the Information Security & Technology risks associated with global investment banking businesses e.g Cyber vulnerabilities, Identity & Access, Change management, SDLC & Testing practices, High resilience architecture, Capacity management, Disaster recovery, Cloud technology.
- Knowledge of key Information Technology & Security industry and regulatory standards (e.g. ISO/ISEC 27000 Series, COBIT5, NIST) is beneficial
- Relevant Information Technology & Security Risk professional certifications are a plus: e.g. CISSP, CISA, CISM, ISO27001 Lead Auditor or similar.
- Strong communicator and presenter. Comfortable presenting to management. Good verbal and written English skills to present complex matters in a simple clear form.
- Ability to work in a pressured environment with continuous demands, able to prioritise effectively and manage time and effort efficiently.
- Experience of working in an Agile mode using Sprint methodology is beneficial.

**How we’ll support you**
- Training and development to help you excel in your career
- Coaching and support from experts in your team
- A culture of continuous learning to aid progression
- A range of flexible benefits that you can tailor to suit your needs

**About us and our teams**

Our values define the working environment we strive to create - diverse, supportive and welcoming of different views. We embrace a culture reflecting a variety of perspectives, insights and backgrounds to drive innovation. We build talented and diverse teams to drive business results and encourage our people to develop to their full potential. Talk to us about flexible work arrangements and other initiatives we offer.