Description :

Title - IT Risk Manager

Exp = 3 - 8 years

Location - Delhi 

Job responsibilities:

Risk Assessment: Conducting thorough assessments of IT systems, infrastructure, and processes to identify potential risks and vulnerabilities. This involves analyzing existing controls, security measures, and compliance frameworks.

Risk Mitigation Planning: Developing strategies and action plans to mitigate identified risks. This may involve implementing new security measures, updating existing systems, or recommending changes to policies and procedures.

Compliance Management: Ensuring that the organization's IT practices align with relevant industry standards, regulations, and best practices. This includes staying up-to-date with evolving compliance requirements and guiding the organization to maintain adherence.

Incident Response: Developing and maintaining incident response plans to address security breaches, data leaks, or other IT-related incidents. This involves coordinating with relevant stakeholders to contain incidents, investigate root causes, and implement corrective actions.

Security Awareness Training: Providing training and awareness programs to educate employees about IT security best practices, data protection policies, and potential risks. This helps to create a culture of security within the organization.

Risk Reporting and Communication: Communicating IT risk findings, assessments, and mitigation plans to senior management, stakeholders, and relevant departments. This includes preparing regular reports, presentations, and updates on the status of IT risk management efforts.

Vendor Risk Management: Assessing and managing risks associated with third-party vendors, service providers, and outsourcing partners. This involves evaluating the security posture of vendors, negotiating contractual terms, and monitoring compliance with security requirements.

Continual Improvement: Continuously monitoring and evaluating the effectiveness of IT risk management processes and controls. Identifying areas for improvement and implementing changes to enhance the organization's overall risk posture.

Emerging Threat Analysis: Staying informed about emerging cybersecurity threats, trends, and vulnerabilities. Proactively researching new technologies and methodologies to address evolving risks and protect the organization's IT assets.

Cross-functional Collaboration: Collaborating with other departments, such as IT security, compliance, legal, and operations, to integrate risk management practices into broader organizational initiatives and strategies.