IS Risk and Compliance Manager

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · Riskhantering

I korthet

Verantwortlich für die Überwachung und Verwaltung der IS-Risiko- und Compliance-Leistung, die Implementierung und Verwaltung der IS-IT-bezogenen regulatorischen und digitalen Compliance in den Ländern des EL Business Area. Etabliert, überwacht und führt kontinuierliche Compliance-Verbesserungen in den operativen EL-Einrichtungen durch. Berichtet an den EL IS Compliance Leader.

Ansvarsområden

Point of contact for IS compliance and risk management and collaborates with other IT functions & EL teams to ensure contribution and involvement.
Process owner for IS / IT Risk management for Electrification business area. Acts as the primary liaison with group and country stakeholders for IS/IT risk management, guiding the assessment process and supporting effective outcomes.
Engages with the business to implement a risk-based methodology for identifying and mitigating organizational compliance exposure by ensuring implementation of IT & SAP compliance standards, ITGC controls, Data Privacy Controls, Trade Compliance Controls and processes and ensuring full compliance with all regulatory and audit requirements, standards and policies.
Evaluates compliance before audits or examinations, identifies gaps, and defines remediation initiatives while managing timely resolution.
Provides External Audit Support by preparing IS teams to be audited and participating in the audit or review process to continually improve the communication and relationships between parties, leading to a clearer under-standing of control and compliance realities.
Understand the requirement of Data privacy (GDPR) based on the ABB guidelines and work with business for implementation.

Krav

Master’s degree in information technology, Computer Science, Software Engineering, or a related qualification like CISSP, CISA, CIA, CISM, CA etc.
15+ years of experience in Information Security or IT general control compliance environments, including at least 5–8 years implementing ITGC controls, risk management frameworks, governance, IT risk assessments, and IT audit activities.
Manage the end-to-end execution (testing and documentation) of annual ICoFR program for IT controls as required by financial reporting regulations
Develop and review workpapers that support testing conclusions and provide clear, concise, and well-documented evidence of control testing.
Familiar with the concept of General Data Protection Regulation (GDPR) and Personally Identifiable Information (PII) - Understand the Trade Compliance requirements and work with application team to classify the export control classification number (ECCN)
Perform the risk assessment and implement the controls as per frameworks for different regulations e.g. Data Privacy, Trade Compliance & NIS 2

Önskade kvalifikationer

Motivated to learn and attentive to new digital regulatory standards

Förmåner

This role is contributing to the Electrification in Bangalore.

Färdigheter

ITGCSAPGDPRECCNNIS 2

#IS risk#compliance#IT risk management#Data Privacy#Trade Compliance#GDPR#PII#ECCN#NIS 2

Om ABB

We are a technology leader in electrification and automation, enabling a more sustainable and resource-efficient future.

ABB is a technology leader in electrification and automation, enabling a more sustainable and resource-efficient future. The company’s solutions connect engineering know-how and software to optimize how things are manufactured, moved, powered and operated. Building on more than 130 years of excellence, ABB’s ~105,000 employees are committed to driving innovations that accelerate industrial transformation. www.abb.com\nPrivacy notice & house rules: https://social.abb/social-media-information\n\nBefore applying for a job at ABB , please read our Fraud Warning:…

Se alla lediga jobb hos ABB Läs mer om ABB Webbplats