Information Security Mgmt - Risk & Controls
- JP Morgan Chase & Co
- Not Specified
- Hyderabad
- 5 years ago
- Email to a friend
- Report this job
Job Description
Assessment & Assurance (A&A) Team is a global function that provides end to end coverage from Program Management to Assessment Execution of regulatory and asset-based control assessments across Global Technology. The scope of work includes control assessments for the various programs covering Financial (SOX, CCAP etc.), Payment Card (PCI), Cyber, Privacy (GLBA,GDPR etc.), Application (ARA)and Infrastructure (ICA)across both Regulatory and Organizational Compliance needs. These control assessments comply with relevant global regulations and JPMC information security policies, procedures andstandards catering to technology teams for all Lines of Business (LOB) in the organization.
As a Vice President your primary responsibility will be manage team members who will be responsible to execute assessment testing of the above listed firm wide programs, conduct various assessments testing, Quality review, RFI management, Peer to Peer co-ordination and communicate test results with the appropriate stakeholders.As part of the India team managers for this team, will play a critical in people managing, team building, cross-team skill optimisation androle in engaging respective Assessments Program Leads/ Application Managers and Information Security Managers within the business areas to assess risk and with respective technology and business partners.
You will have an eye for detail and an ability to see big picture and recognize need to assess control issues more broadly and across groups. You will also support the Annual Application Risk Assessment, working with Application Developmentteams to provide oversight of the controls and suitable remediation plans, as required.The role will also require strategic thinking to drive efficiencies in the way we do our various assessments across the firm.
This is a global interfacing role with a unified people management approach where #OneTeam is the focus across the various location of the banks A&A execution team members.
PRIMARY DUTIES AND RESPONSIBILITIES:
- People management role for a global interactions on a daily basis and be able to lead with strong empowerment mindset and help growth of the staff overall.
- Assist with the annual firm wide compliance assessmentprogram (SOX, CCAR and PCI DSS), testing the evidence of the controls and identifying any significant control deficiencies, working with the appropriate Assessment leads/ Information Security Manager to identify appropriate remediation to improve the controls as necessary.
- Assist in Application Risk Assessment (ARA) process that aims to gather risk specific information about an application.
- Assist with the firm wide PCI DSS compliance program and provide end-to-end control oversight, assurance of compliance with requirements of the Data Security Standard, as well as risk and issue management and analysis.
- Support the Application Control Testing program including initial interviews regarding standard controls usage for applications in scope; assist with the identification and testing of shared controls. Perform testing of the evidence submitted to validate it justifies control effectiveness.
- Work with technology teams to walkthrough, gather control design requirements facilitate discussions and bring to closure control issues.
- Advise Lines of Business (LOBs), based on the testing their results to ensure they are in compliance with the Firm's guidelines.
- Communicate issues and evaluate issues/findings and best practices with the rest of the team and manager.
- Perform QA reviews of control testing working papers.
- Work actively with the Assessment Leads/ Technology Controls Officers on the guidance and IT-related issues.
- Participate in additional key control projects related to enhancement of the Compliance and other assessment programs.
- Support internal education and best practices sharing with peers and colleagues, as well as information security education & awareness, as needed.
This role requires a wide variety of strengths and capabilities, including:
- Bachelors degree or equivalent experience
- CRISC certification and any other Information Security Certificate in conjunction with relevant experience is a plus
- Good understanding in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management, and data protection
- Strong leadership skills with exceptional communication and executive presence across a firm with global managers and senior stakeholders
- Strong knowledge of Risk and related Technology controls and the ability to articuloate, educate and work with stakeholders across the bank
- Experience in SOX and related regulatory assessments, Application assessment and control testing and be detail oriented with ability to evaluate processes, controls and issues to determine the risks and perform Quality Checks and reviews as needed.
- For this specific role, the firm is looking for a demonstrated strong PCI compliance experience and working with managing assessment and compliance to PCI of internal applications which shall be a major plus
- Experience in managing RFIs for assessments across internal compliance needs and also regulatory needs
- Experience in leading process improvement and enabling automation and use of tools for automation
- Advanced knowledge of multiple IT control and project management practices and experience working across large environments
- Ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals
- Hands-on knowledge on data analytics tool like Tableau, ClickView, etc., for performing required data analysis and creating dashboards as needed.
- Knowledge on scripting languages like C/C++/C#, VBA, Java, Python, SQL to optimize and automate the processes to reduce toil and enhance the quality.
- Proficient in verbal and written communication skills, including the ability to effectively lead discussions and meetings with internal management, external/ internal audit and peer groups with stakeholders across the globe.
- Strong interpersonal skills - verbal communications, written communications, and a good track record of collaboration.
- Proficient in MS Office - Microsoft Word, Excel, Access and PowerPoint.
- Exposure to managing consulting staff, resource management and budget and financial details is a plus
- Should have reasonable knowledge of APAC technology regulatory requirements and risk
- Experience in people management role with the expectation to be able to work across management teams in India and global teams.
Employement Category:
Employement Type: Full timeIndustry: BankingFunctional Area: ITRole Category: Software EngineerRole/Responsibilies: Information Security Mgmt - Risk & ControlsContact Details:
Company: JP Morgan Chase & CoLocation(s): Hyderabad+ View Contact
Fraud Alert to job seekers!
₹ Not Specified
JP Morgan Chase & Co
JPMorgan Chase & Co., one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world’s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans ove...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in