Job Description
Job Title: Risk and Control Specialist
Corporate Title: Assistant Vice President
Division: Technology
Location: Pune / Bangalore
Overview:
The Risk and Control Specialist role will be part of the Group COO Divisional Control and Regulatory Office (DCRO) Technology team which supports the Technology Data and Innovation (TDI) division in managing their divisional risks. DCRO’s mission is to continuously enhance an effective on-Financial Risk Management Framework to support TDI’s priorities and strategy, leading to a stronger risk culture and improved control environment.
This role will focus on the risk management lifecycle of technology related risks. This would include risk identification, risk assessment, risk management/mitigation and risk monitoring. It will also entail design and implementation of control frameworks in order to mitigate risks and to perform risk assessments against these frameworks.
In particular, this role will involve risk and control assessments for cloud technologies and migration of application workloads to the public cloud. DB has recently signed a partnership with Google and has started using Google Cloud Platform (GCP) services in their application design – this role will be responsible for the design and implementation of controls required for such a transformation and assessment of the residual risk.
Key Responsibilities:
• Design, develop and implement controls/control frameworks taking into consideration existing DB controls as well as industry standard frameworks.
• Identify cloud specific control requirements (regulatory, compliance, policy related etc.) and incorporate them into the control frameworks.
• Incorporate controls into DB’s Integrated Control Framework to ensure consistency in compliance measurements and reporting
• Work with representatives of governance processes within DB like operational readiness, SDLC Governance, Change Management to identify interface points and remove duplication of controls.
• Perform risk and control assessments to identify the design and operating effectiveness of controls
• Work with controls owners from Technology Data and Innovation divisions and Non-Financial Risk management (NFRM) teams to ensure minimum control standards are being followed and controls are being automated and streamlined.
Competencies
• Ability to design technology related risk management processes and frameworks and create implementation plans
• Very good analytical skills and ability to oversee/structure complex tasks
• Persuasive power and persistence in driving process changes, especially with senior stakeholders
• Very good communication skills, both written and verbal, with the ability to translate complex functional and technical content and dependencies into a language which can be understood by the relevant stakeholders.
• Self-motivated and flexibility to work autonomously coupled with ability to work in virtual teams and matrix/global organisations including appreciation of different cultures during collaborating and sharing.
• Ability to build up knowledge related to new technology / process / solutions in an effective and timely manner
• Feedback: Seeks feedback from others, provides feedback to others in support of their development, and is open and honest while dealing constructively with criticism
• Inclusive Leadership: Values individuals and embraces diversity by integrating differences and promoting diversity and inclusion across teams and functions
• Coaching: Understands and anticipates people's needs, skills, and abilities, in order to coach, motivate and empower them for success
Knowledge & Experience
• Risk Management experience in the financial sector, especially on the management of non-financial risk in technology areas.
• Knowledge about management of information security risks is a key requirement.
• Experience of conducting risk assessments, identifying and rating residual risk and reporting on it.
• Knowledge about cloud technologies and services is a key requirement. This includes experience of working with cloud-based solutions and implementations in the banking sector. An understanding of the security, risk and compliance challenges of cloud migration is essential. The candidate should have an ability to clearly articulate the benefits, limitations and risks with migration options for a public cloud environment from a security, risk and compliance viewpoint
• Experience of working on global regulatory requirements and an understanding of the mapping of such requirements to the bank’s processes and frameworks.
• Experience in effectively collaborating across multiple teams and geographies
• Advanced knowledge of MS Office products.
• Preferred certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager CISM
Corporate Title: Assistant Vice President
Division: Technology
Location: Pune / Bangalore
Overview:
The Risk and Control Specialist role will be part of the Group COO Divisional Control and Regulatory Office (DCRO) Technology team which supports the Technology Data and Innovation (TDI) division in managing their divisional risks. DCRO’s mission is to continuously enhance an effective on-Financial Risk Management Framework to support TDI’s priorities and strategy, leading to a stronger risk culture and improved control environment.
This role will focus on the risk management lifecycle of technology related risks. This would include risk identification, risk assessment, risk management/mitigation and risk monitoring. It will also entail design and implementation of control frameworks in order to mitigate risks and to perform risk assessments against these frameworks.
In particular, this role will involve risk and control assessments for cloud technologies and migration of application workloads to the public cloud. DB has recently signed a partnership with Google and has started using Google Cloud Platform (GCP) services in their application design – this role will be responsible for the design and implementation of controls required for such a transformation and assessment of the residual risk.
Key Responsibilities:
• Design, develop and implement controls/control frameworks taking into consideration existing DB controls as well as industry standard frameworks.
• Identify cloud specific control requirements (regulatory, compliance, policy related etc.) and incorporate them into the control frameworks.
• Incorporate controls into DB’s Integrated Control Framework to ensure consistency in compliance measurements and reporting
• Work with representatives of governance processes within DB like operational readiness, SDLC Governance, Change Management to identify interface points and remove duplication of controls.
• Perform risk and control assessments to identify the design and operating effectiveness of controls
• Work with controls owners from Technology Data and Innovation divisions and Non-Financial Risk management (NFRM) teams to ensure minimum control standards are being followed and controls are being automated and streamlined.
Competencies
• Ability to design technology related risk management processes and frameworks and create implementation plans
• Very good analytical skills and ability to oversee/structure complex tasks
• Persuasive power and persistence in driving process changes, especially with senior stakeholders
• Very good communication skills, both written and verbal, with the ability to translate complex functional and technical content and dependencies into a language which can be understood by the relevant stakeholders.
• Self-motivated and flexibility to work autonomously coupled with ability to work in virtual teams and matrix/global organisations including appreciation of different cultures during collaborating and sharing.
• Ability to build up knowledge related to new technology / process / solutions in an effective and timely manner
• Feedback: Seeks feedback from others, provides feedback to others in support of their development, and is open and honest while dealing constructively with criticism
• Inclusive Leadership: Values individuals and embraces diversity by integrating differences and promoting diversity and inclusion across teams and functions
• Coaching: Understands and anticipates people's needs, skills, and abilities, in order to coach, motivate and empower them for success
Knowledge & Experience
• Risk Management experience in the financial sector, especially on the management of non-financial risk in technology areas.
• Knowledge about management of information security risks is a key requirement.
• Experience of conducting risk assessments, identifying and rating residual risk and reporting on it.
• Knowledge about cloud technologies and services is a key requirement. This includes experience of working with cloud-based solutions and implementations in the banking sector. An understanding of the security, risk and compliance challenges of cloud migration is essential. The candidate should have an ability to clearly articulate the benefits, limitations and risks with migration options for a public cloud environment from a security, risk and compliance viewpoint
• Experience of working on global regulatory requirements and an understanding of the mapping of such requirements to the bank’s processes and frameworks.
• Experience in effectively collaborating across multiple teams and geographies
• Advanced knowledge of MS Office products.
• Preferred certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager CISM
💡 Quick Summary
Seeking a career-building opportunity? The Assistant Vice President position is now open for candidates interested in the Bank Jobs sector. This role in Pune offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Bank Jobs is a plus.
