Title: Risk Compliance & Governance Lead - L1
Job Description
Role Purpose
The purpose of the role is to lead and manage security requirements and recommend specific improvement measures that helps maintain the Security posture of organisation
͏
Do
1. Lead Risk and Compliance to protect sensitive information
a. Drive Risk Management, Regulatory and Contractual compliance
b. Diagnose the level of preparedness of the customer for cyber security and health and accordingly propose a solution to the client
c. Build appropriate risk governance with client partners and internal stakeholders and ensure customer policies and SOW requirements are in line with the deliverables
d. Govern design and rollout of Common Compliance frameworks
e. Ensure policies, processes and standards are in place to identify, assess, measure, manage and report risks
f. Manage the security requirements including regulatory requirements as per the customer demands
g. Monitor risk controls like access controls, backup, recovery, network security etc as per the client needs
h. Act as point of contact for escalations on the risk management framework and provide guidance / decisions as appropriate
i. Act as the Subject Matter expert (SME) on risk for team and drive actions required to ensure the businesses remain fully compliant
j. Responsible for building, developing & maintaining effective relationships with Key stakeholders in Client Organisations, especially related to their Risk functions
k. Ensure all required controls are implemented, documented and monitored so as to ensure full audit compliance
l. Coordinate with IT team members to ensure IT audit findings are addressed in a timely manner
m. Monitor overall cyber health of the customer and suggest corrective measures to cyber security issues and provide timely support
͏
2. Team Management
a. Team Management
- Clearly define the expectations for the team
- Assign goals for the team, conduct timely performance reviews and provide constructive feedback to own direct reports
- Guide the team members in acquiring relevant knowledge and develop their professional competence
- Educate and build awareness in the team in Wipro guidelines on revenue recognition, pricing strategy, contract terms and Revenue Assurance Manual
- Ensure that the Performance Nxt is followed for the entire team
b. Employee Satisfaction and Engagement
- Lead and drive engagement initiatives for the team
- Track team satisfaction scores and identify initiatives to build engagement within the team
͏
Deliver
No. | Performance Parameter | Measure |
1. | Adherence to established risk and compliance framework | Reported incidents, no. of major security incidents, cost per incident, meeting regulatory requirements, appropriate management of customer impact, mean time to detect (MTTD), mean time to resolve (MTTR), cyber security training |
2. | Disaster recovery | Disaster recovery |
͏