Track Lead - Operational Risk, SAP Security

Finans, bank och juridik · Bank och investeringar · Riskhantering · Regelefterlevnad

I korthet

This role is responsible for planning, running, and closing mainframe disaster recovery exercises, including managing regulatory evidence for RTO and RPO. Additionally, it involves managing the mainframe risk register, access reviews, internal and external audits, and ensuring compliance with regulatory standards.

Ansvarsområden

Coordinate DR exercises for mainframe environments, including planning, preparation, and execution of GDPS region switches and Hyperswap tests.
Maintain application recovery sequences, dependency maps, call trees, and escalation paths.
Conduct lessons-learned sessions and update DR runbooks and plans.
Review DR plans annually and after major environmental changes.
Report DR readiness, exercise results, and open findings to leadership and customer risk/compliance teams.
Manage the mainframe risk register, including scoring, tracking risks, assigning owners, and reporting trends.
Track policy exceptions and control deviations until closure or formal acceptance.
Map regulatory requirements to mainframe controls and maintain the control inventory.
Assess the impact of regulatory changes in Canada and Europe on the mainframe environment.
Support third-party and service provider risk assessments for mainframe vendors.
Support incident reporting and post-incident reviews with regulatory reporting expectations.
Report on patching and vulnerability remediation status as compliance evidence.
Define and track audit and compliance metrics.
Retain audit evidence as required by regulators and internal policy.
Run periodic access reviews for privileged IDs, offboarded employees, and system IDs, and publish reports.
Organize periodic internal audits, capture gaps, and follow up on remediation.
Own and maintain compliance requirements based on regulatory standards (OSFI, PIPEDA, DORA).
Own the implementation of security controls required from a compliance perspective.
Act as the single point of contact for internal and external audits.
Establish and maintain the template for the audit evidence pack.
Coordinate with teams to gather audit responses within SLAs.

Krav

Experience coordinating DR exercises for mainframe environments.
Working understanding of GDPS, RTO, and RPO concepts.
Experience with change management and stakeholder coordination across infrastructure and application teams.
Experience supporting internal and external audits, including evidence preparation and finding remediation.
Familiarity with regulatory expectations for financial institutions and insurers (OSFI guidelines, PIPEDA, DORA, GDPR, Solvency II).
Working knowledge of access management and mainframe security controls.
Strong written reporting skills for DR reports, risk reporting, and audit responses.

Önskade kvalifikationer

Preferred certifications: ITIL, CISA, CRISC, ISO 27001, or a business continuity certification such as CBCP or MBCI.

Förmåner

Supercharge your potential.
Find your career.
Find your spark.
Be part of a place that knows that helping its customers stay on top starts by putting its people first.
Opportunity to work at a global technology company with over 230,000 people across 60 countries.
Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion.

Färdigheter

GDPSRTORPOChange ManagementAccess ManagementOSFIPIPEDADORAGDPRSolvency IIITILCISACRISCISO 27001CBCPMBCI

#Disaster Recovery#Operational Risk#SAP Security#Mainframe#Compliance#Audit#Risk Management#Regulatory Standards

Om HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

Se alla lediga jobb hos HCLTech Läs mer om HCLTech Webbplats