Head of Governance Risk and Compliance

About this role

• Ensure strong oversight and governance on the following areas:
• IT/IS risk and controls
• cyber security (Infrastructure, Application, Network, Endpoints etc.)
• complete audit lifecycle performed by various control functions (internal, external, customers etc.)
• adherence to GDPR requirements
• implementation and adherence to the IT and IS policies, frameworks and processes.
• Ensure all identified risks are tracked and mitigated.
• Define, implement and adhere to the IT DR framework and policy.
• Working with the technology leaders to identify the control gaps.
• Maintain strong working relationship with the technology leaders and other internal stakeholders.
• Manage and maintain strong working relationship with the members of the Worker’s Councils.
• Participate and represent the technology function in various executive level committees w.r.t IT risks & controls.
• Ensure risk heat map and risk registers are prepared and presented to the management.
• Build the team and mentor the team members
  
  

• Functional Competencies/ Skill
  
  

• Solid experience in identification of risks and evaluation of controls.
• Experience in IT Governance
• Should have managed enterprise level IT audits/IT Governance/IT Security for a large organization of similar size as Wipro or BFSI industry.
• Should have knowledge of various leading standards/frameworks such as COBIT, ITIL, COSO, PCI-DSS/DSA, NIST etc.
• Expert level understanding of GDPR guidelines.
  
  

• Understanding of the Wipro system (interrelatedness, interdependencies and boundaries) and perform problem solving in this complex system.
• Proficient in preparing various dashboards, reports and presentation for executive management.
  
  

• Knowledge of current and upcoming technology (automation, tools and systems) to build efficiencies and effectiveness in own function.
• Experience in various tools, technology platforms, processes such as PIM, PAM, network and security devices, Microsoft Azure, GCP, AD, ITIL processes.
  
  

• Excellent executive level communication skills.
• Superior influencing skills.
• Flexibility to adapt an ever evolving and dynamic work environment.
• An eye to spot control risks with an intuition of risk prioritization.
• Maintain strong working relationship with the team members and should be able to motivate the team members to achieve the goals and objective of the function.
• Decision maker with strong analytical skills and an eye for detail
• Curious, Creative and Innovative
  
  
Addtional qualifications:


• CA or B.E in Computer Science/Information Technology or equivalent qualification.
• Industry recognized certification in information security such as CISSP, CISM, CISA etc.
• Overall, 15-20 years of experience in IT risks & controls management and governance pillars.