I͏TRO Lead

Please find the revised JD under 4000 characters:

Controls Assurance (Jono):
   - Establish and align with client’s controls framework per ISO 27001, NIST, Essential 8, etc.
   - Align with client’s security policies, standards, and guidelines to support security control implementation.
   - Collaborate with Wipro and client technical teams to ensure control implementation.
   - Implement Wipro’s ERM controls across service lines.
   - Facilitate security audits, aiming for minimal findings.

Risks and Issues Management (Jono):
   - Conduct risk assessments with stakeholders to identify and mitigate risks.
   - Participate in governance forums to discuss service and application risks.

Resilience (Christian Kelly, Vicki Law):
   - Establish and manage the Business Continuity Plan (BCP) for client services.
   - Coordinate with Wipro’s BCM team and customer’s resilience team on IT Disaster Recovery and IT Service Continuity, including necessary tests.

Governance (DG, KJ, Jono):
   - Conduct governance meetings to discuss risks, compliance, BCP, and DR/ITSC status.
   - Ensure regular reporting on vulnerabilities, identity governance, SLAs, and KPIs.

Vulnerability Management (Jono, Grant):
   - Lead the team managing vulnerability remediation across client’s IT ecosystem.
   - Establish processes for vulnerability remediation and threat-intel based remediation.

Identity Governance (KJ):
   - Lead the team managing user access reviews and certification for all applications.
   - Establish and manage identity governance processes and ensure accurate record-keeping.

Other ITRO Responsibilities (Wipro ERM, Account Leaders):
   - Develop and facilitate security training programs.
   - Support Strategy and Risk practice initiatives.

Skillsets:
   - Information Security Management (ISO 27001)
   - NIST Frameworks
   - Risk Management
   - Security Controls Assurance
   - Privacy Assessment
   - Business Continuity Management
   - IT Disaster Recovery / IT Service Continuity

͏