Log In
Sign Up
Role & Responsibilities:
a) Data Leakage Prevention- Single point of contact for the assignment of IT DLP Incidents
- Monitor the data movement through incidents assigned
- Provide continuous guidance to the user for occurred incidents
- Escalate to the senior management in case there are any mishaps
- Taking necessary action and documenting the same if there are non-disciplinary action by the user
- Approximately on daily basis 500-1000 events are assigned.
b) Risk Control Self-Assessment (RCSA) for (KMBL/KMIL/KIDF/KMPL):
- Define the calendar for RCSA for the FY
- Collection and validation of data received from it owners.
- Requesting more data if required in case as per the controls
- Performing sample checks as defined by risk.
- Publishing Draft reports to IT owners.
- Post discussion with IT owners publishing
- Make an action plan for each failed control as a control improvements evaluation.
- Testing controls for inherent risks with Moderate, Moderate to High, and High rank level.
- Submitting the reports with ORM team
c) 3rd Party Questionnaire / Audits (SAR) / PPI
- Coordinate with the relevant stakeholders to have the questionnaire to fill the data and submit on timely basis.
- Coordinate with the Application & Infra team for the requisite evidences and timely submission.
d) KPIs Bank & Subsidiaries
- Annual basis scope needs to augment to include the KPIs for Bank & Subsidiaries
- Developing and publishing the reports to the stakeholders.
e) IT Risk Register
- Ensuring the risks and mitigates are documented
- And approval is taken for the identified risks.
f) IT Exceptions
- Maintaining the exceptions list for the life cycle
- And approval is sought when the exception is going to finish.