Enterprise Risk Manager
- NLB Services
- 7 - 12 years
- Hyderabad
- 1 month ago
- Email to a friend
- Report this job
Job Description
Key Responsibilities:
1. IT Control Testing and Evaluation:
- Plan and execute control testing of ITGCs and automated application controls.
- Evaluate design and operating effectiveness of controls related to:
- User access management (IAM)
- Change management
- System development lifecycle (SDLC)
- Backup & recovery
- IT operations and infrastructure security
- Document testing procedures, results, and exceptions in line with ERM standards.
2. Risk and Control Self-Assessments (RCSA):
- Support IT RCSA activities across technology platforms and infrastructure.
- Identify and assess IT risks, including cybersecurity threats and third-party/vendor risks.
- Collaborate with IT stakeholders to remediate identified control gaps and improve IT control posture.
3. Regulatory and Framework Compliance:
- Ensure alignment with regulatory requirements and industry frameworks such as:
- SOX (Sarbanes-Oxley)
- FFIEC, OCC, NIST, COBIT, ISO 27001
- Monitor compliance with internal IT policies, procedures, and enterprise risk tolerance.
4. Stakeholder Engagement & Collaboration:
- Work closely with IT, Information Security, Compliance, and Internal Audit teams.
- Serve as the subject matter expert (SME) on IT control testing and risk identification.
- Communicate findings, risks, and recommendations clearly to technical and non-technical stakeholders.
5. Reporting and Documentation:
- Develop testing scripts, risk-control matrices, and evidence documentation.
- Prepare executive-level reports highlighting key findings, trends, and remediation status.
- Track control testing progress and report deviations from expected timelines or outcomes.
6. Continuous Improvement:
- Stay current with technology risk trends, emerging threats, and evolving compliance standards.
- Recommend enhancements to IT control testing methodologies, tooling, and governance processes.
Key Qualifications:
- Education: Bachelors degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related fields. Advanced certifications are a plus.
- Certifications (preferred):
- CISA (Certified Information Systems Auditor)
- CRISC (Certified in Risk and Information Systems Control)
- CISSP, CGEIT, or ITIL certifications
- Experience:
- 810 years in IT risk management, internal audit, or control testing within financial services or technology-driven environments.
- Technical Skills:
- Strong knowledge of ITGCs, application controls, and system security principles
- Hands-on experience with GRC platforms (e.g., Archer, MetricStream, ServiceNow GRC)
- Familiarity with scripting or automation tools for testing/reporting is a plus
- Proficient in Excel, Power BI, or Tableau for data analysis and reporting
Please share your cv at su************a@nl****h.com
Job Classification
Industry: Analytics / KPO / ResearchFunctional Area / Department: IT & Information Security,
Role Category: IT Security
Role: Manager Information Security
Employement Type: Full time
Contact Details:
Company: NLB GroupsLocation(s): Hyderabad
Keyskills: It Controls IT Risk Management Itgc Testing Itgc Audit It General Controls SOX
Similar positions
NLB Services
NLB SERVICES PRIVATE LIMITED Our definition of success is the tangible, measurable difference we make to our clients' processes and bottom lines.- Sachin Alug, CEO
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in