Operational Risk Manager - IT User Access & Segregation of Duties

Manager Risk - Operational - Mumbai - Vikhroli - JM

Key Objective of the Job:

•              Effectively manage IT operational risks pertaining to User Access Mgt. (UAM) & Segregation of Duties (SOD) in various Entities and different business functions 

•              Report to the senior management periodically on the SOD related activities

•              Build risk culture, create awareness and support in various reviews and regulatory requirements

Major Deliverables:

•              Identify potential risks and gaps related to user access and SOD including but not limited to role conflicts, data breaches, etc.

•              Conduct thorough review of the access matrix & roles designed prior to implementation

•              Periodically review & update the SOD Framework

•              Maintain application & access universe from UAM & SOD perspective

•              Perform periodic sample testing of users & role access

•              Building exception reports and reviewing the output for UAM / SOD improvement

•              Prepare Risk & Control Matrix and facilitate Risk & Control Self- Assessment (RCSA) and create Key Risk Indicators (KRIs) for various LoBs from UAM & SOD perspective. Assist in Internal Financial Controls review cycle.

•              Collaborate with IT, business & support functions to ensure effective risk management practices are integrated into daily operations

•              Check compliance with relevant regulatory requirements, industry standards and internal policies

•              To conduct other IT process reviews, control testing, etc. and monitor implementation of mitigation strategies (as & when required)