Job Description
The roles responsibilities include:
- Building strong positive relationships with the local Information Security / Risk community, within Technology and also the Firm, for example Internal Audit, Operational Risk Department, and Risk Officers
- Delivering program specific communications to Global stakeholders on risk and control related matters
- Presenting overview / results of testing program to stakeholders and other relevant parties
- Coordinating stakeholders across Firm departments to scope relevant testing
- Planning and reviewing testing of controls and/or policy compliance executed by ITCT team, providing regular management reporting on progress to meet regional requirements
- Producing or reviewing work paper documentation to standards suitable for use by auditors
- Documenting identified risks and issues for reporting
Education: Bachelor's degree
A minimum of 3-5 years of relevant risk experience from roles in any of the following:
- Regulatory (e.g., working as a financial services regulator or having experience dealing with regulators)
- Audit (internal or external)
- Risk Officer / Information Security Officer
- Technology Risk Governance
- Risk Assessment (e.g., RCSA)
- Control Testing (e.g., SOX)
- Information Security / IT Security (e.g., Entitlements Management, Segregation of Duties, Threat Management, Penetration Testing, Strategy)
- Technology / Information Security Policy / Procedures
- Process/Risk/Control Frameworks, e.g., COBIT
Certifications: Attainment of the following certifications is a strong plus, but not required
- Certified in Governance for Enterprise IT (CGEIT)
- Certified Internal Auditor
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified Information Security Professional (CISP)
- Certified in Risk and Information Systems Control (CRISC)
- ISO 27001 Auditor,
Employement Category:
Employement Type: Full time
Industry: Banking / Financial Services
Role Category: Testing
Functional Area: Not Applicable
Role/Responsibilies: Control Testing
Contact Details:
Company Name: Morgan StanleyLocation(s): Bengaluru
Keyskills:
technology risk