• Us Citizen

• Green Card

• Corp-Corp

• Consulting/Contract

• UG :- - Not Required

• PG :- - Not Required

• No of position :- ( 1 )

• Post :- 7th May 2021

Principal Responsibilities:
• Support the Technology Risk Issue Management process by facilitating the discussion, documentation and submission of risks and issues with the associated IT and TR Control Owners as well as Internal Audit.
• Schedule and perform information risk assessments using DTCC methodology; identify, document and communicate control deficiencies in business processes and technology systems
• Partner with the business and technology to agree cybersecurity risk findings identified through the risk assessment (e.g., vendor, application, infrastructure), new initiatives, and ad hoc processes
• Provide risk remediation recommendations that the business and technology may implement to mitigate identified control gaps
• Partner with business and IT to ensure that risks are clearly articulated in a manner that is understood by business and technology audiences
• Evaluate management responses to ensure that remediation plans and tasks adequately address identified control gaps
• Document risk issues in the DTCC designated risk register
• Assist the business and technology groups through the DTCC process for policy exceptions and risk acceptance
• Participate in and influence information risk assessment process improvement
Experience:
• 5+ years of risk assessment experience in one or more areas: application, infrastructure, vendor risk management
• Financial Services Industry experience a plus but not required
• Proficiency with Information Risk Management best practices

Knowledge and Skills Required:
• Proven knowledge of technical infrastructure, networks, databases and systems and how they affect an organization’s cybersecurity risk
• Proven knowledge of security methodologies, policies, standards and best practices
• Proven knowledge of information technology systems, infrastructure and operations
• Ability to explain and articulate technical concepts using both technical and non-technical language
• Critical thinking and analytical skills
• Excellent presentation skills (MS PowerPoint)
• Ability to manipulate data in a spreadsheet (MS Excel)

Education, Training and Certification:
• Bachelor’s degree preferred
• CISSP/CISM/CRISC certification preferred