
Specialist, Risk Assurance
- Noida, Uttar Pradesh
- Permanent
- Full-time
- What you will do:
- Developing detailed understanding of security policies, standards, and associated processes as it pertains to third party risk management program.
- 5-8 years of experience in the domains such as risk and compliance, information security
- Driving collaboration between cross-functional stakeholders and facilitating strong partnership with Fiserv Business Units
- Capability of contributing to TRPM Risk transformation projects in alignment with organization strategy.
- Responsible for independently conducting third-party risk assessment in line with security standards, practices encompassing people, process and technology controls
- Proficient in reviewing documentation including but not limited to security policies, processes, SOPs, third party audit/assurance reports including SOC 2, PCI AOC/ROC/ROV/SAQ, ISAE, ISMS, penetration testing, vulnerability scanning reports to identify gaps/exceptions
- Responsible for monitoring, tracking risks through closure by collaborating with multiple constituents including internal and external stakeholders; ensuring auditable results are maintained throughout the engagement.
- Ensure accurate and timely review; responsible for well-written observations, and walking stakeholders through the process lifecycle as needed
- Lead and participate in regional and global TPRM governance forums and liaise with business stakeholders. Document and maintain the relevant documentation.
- Establish trust and credibility with key partners; develop and foster constructive professional relationships with multiple stakeholders including but not limited to executive and line management, risk officers, risk contacts and third-party contacts
- Work on vendor events, liaison with business stakeholders and follow-up with vendors
- Mentor and train Junior team members on Vendor Risk Assessment program.
- Bachelor’s Or Master’s degree from an accredited university is preferred, equivalent work experience will be considered.
- 5- 8 years of experience in IT Risk and Compliance Management or Information Security domain
- Good interpersonal, written/verbal communication, and organizational skills
- Ability to handle internal and external discussions/interactions issues in a professional, assertive, and proactive manner
- Ability to work effectively within a matrixed organization
- Strong organizational and time management skills with Global stakeholder management
- Strong MS office skills (Microsoft Excel, Word, PowerPoint, and SharePoint)
- Exposure to GRC ( Governance, Risk and Compliance tools)
- Financial services experience, including working in highly regulated environments
- Knowledge of IT audit, ISO 27001, ITIL, Vendor Risk Management process
- Ability to interact across all levels of management
- Attention to detail with a commitment to high-quality standards
- A successful track record for delivering results in a timely manner
- Industry Certifications: CISA, CRISC, CTPRA, ISO 27001 LA/LI or equivalent etc.)
- Apply using your legal name
- Complete the step-by-step profile and attach your resume (either is acceptable, both are preferable).