AVP - D&A Governance, Projects & Reporting

Overview

Oversee governance, risk management, regulatory compliance and internal controls for the Data and Analytics function, supporting business objectives and decision-making.

What you'll do

• Conduct RCSAs and maintain Risk Registers for the respective Business Unit.
• Embed the risk appetite statement and risk limits into day-to-day activities for management of risk.
• Facilitate, partake in, and verify the results of the self-assessment process, and opine on departmental/business assessment of risk types, quantification, and frequency.
• Ensure all operational and enterprise risk issues, root causes and mitigation plans approved by functional heads are brought to the attention of the Risk function and the Department/business every month.
• Prepare periodic reporting of risks, operations loss, KRIs and RAS to the Risks team.
• Review the appropriateness of the design and implementation of risk mitigation strategies.
• Follow up on timely documentation and status of action plans, open issues (Internal Audit, External Audit, Regulator) and other initiatives pending completion.
• Prioritize control testing based on the level of risk associated with each control.
• Communicate statutory guidelines and other policies within the Data and Analytics department.
• Collaborate with leads on timely and accurate regulatory submissions.
• Support sustenance and testing; track and report compliance status of sustenance and testing observations.
• Coordinate management responses and review them.
• Prepare periodic submissions, including the Quarterly Compliance Certificate, and track adherence to regulatory circulars and directives.
• Track and report status of regulatory inspection observations.
• Coordinate with stakeholders for compliance closure and evidence submission.
• Support audit engagements, coordinate and review management responses, and track and close audit observations.
• Conduct governance reviews, assessments and control effectiveness evaluations.
• Track key governance metrics and report findings to senior management.
• Monitor remediation of governance-related issues and action plans.
• Escalate significant governance concerns to relevant committees.
• Coordinate development, review, approval and communication of Data and Analytics policies and Standard Operating Procedures.
• Maintain the policy inventory and ensure periodic policy reviews.
• Ensure policies and procedures are approved and effectively communicated to relevant stakeholders.
• Liaise with business teams, Risk, Compliance, Audit and senior leadership.
• Prepare governance dashboards and management information (MI) for the function.
• Share periodic updates for relevant Committee meetings.
• Analyze trends, risks, control gaps and governance exceptions.

What you'll need

• 5-7 years of experience in an IT / IS Audit, Assessment, or Information Security role.
• Bachelor's degree in computer science, management information systems or a related field.
• CISA certification is a must.
• Demonstrated in-depth knowledge of concepts, best practices and controls across Information Security areas/domains, including governance & risk management, access control, cybersecurity, physical security, security architecture and design, business continuity/disaster recovery, network security, application & operations security and compliance/incident management.
• Demonstrated ability to understand complex technologies, business processes, regulations and emerging risks.
• Strong understanding of SOX legislation and IT frameworks including COSO and COBIT.

Nice to have

• CA, CPA or CIA certification (or actively working towards one), or other similar certifications.

Details

• Hybrid position: regular work performed virtually and in-person at an assigned TU office location for a minimum of two days a week.
• Location: Mumbai - One World Center.