Manager

JOB DESCRIPTION

BASIC INFORMATION

Position Title

Manager

Grade

M6L1 / M6L2

Department

Risk Management- Risk Control Unit (RCU)

Location

Mumbai – Head Office

Business

Position Reporting To

AVP – Risk Management

Total Headcount (Direct) Supervised

Total Headcount (Direct / Indirect) Supervised

JOB PURPOSE

The Manager – Risk Control Unit (RCU) acts as the first-level reviewer of Branch Risk Assessment reports submitted

by Regional Risk Managers (RRMs) across PAN India. The role ensures that every assessment is complete, accurate

and aligned with the organisation's risk framework, drives root cause analysis and mitigation through Risk Owners, and

supports the wider Risk Management agenda on business continuity, information security, data protection and risk culture.

KEY RESPONSIBILITIES

Functional Responsibility

1.     Risk Evaluation & Mitigation

·       Perform root-cause analysis of risks accepted from reviewed Branch Risk Assessment reports.

·       Coordinate with the respective Risk Owners across departments to agree on mitigation actions.

·       Track timely closure of observations within agreed turn-around timelines (TAT).

·       Coordinate with RRMs and the CRM team on Sales Audit calls in cases of mis-selling complaints.

2.     Branch & Regional Engagement

·       Conduct selective on-site visits to branches and regions to validate RRM assessments and gather first-hand insights.

·       Support evaluation of the BCM Star Assessment carried out by RRMs.

·       First-level reviewer of Branch Risk Assessment reports submitted by Regional Risk Managers (RRMs) following their on-site visits to branches across PAN India.

·       Each report submitted by an RRM covers five components:

1.     All risks identified during the branch visit (process, people and systems risks).

2.     Branch KRI Dashboard – assessed from the Risk Champion Contest perspective.

3.     Business Continuity Readiness Checklist.

4.     Information Security Control Verification Checklist.

5.     Data Protection risks observed in the region.

·       The incumbent reviews each report for completeness and accuracy, recommends changes back to the RRM where required, and on closure, submits the reviewed report to the next level for approval.

3.     Reporting & Dashboards

·       Maintain the RCU data bank and central risk dashboard.

·       Publish the monthly RCU report to Regional Risk Managers.

·       Publish the monthly Risk Champion Scorecard.

4.     Framework, Standards & Systems

·       Contribute to the design and continuous enhancement of the Branch Risk Review module and the Risk Scorecard.

·       Align the Branch Risk Assessment framework with ISO 31000, ISO 22301 and ISO 27001.

·       Conduct User Acceptance Testing (UAT) for enhancements to the Risk Control module of the Operational Risk Management (ORM) System.

5.     Capability Building & Risk Awareness

·       Co-design training programmes and awareness modules delivered by RRMs across regions.

6.     Strategic & Ad-hoc Projects

·       Contribute to initiatives such as Departmental Risk Management (DRM) implementation, Risk Maturity Assessment, Organizational Resilience (ISO 22316) and the creation of Regional Risk Registers.

JOB REQUIREMENTS

Qualification & Experience

·       Graduate or Post-Graduate degree in Commerce, Finance, Business Administration, Management or a related discipline from a recognized institution.

·       Professional certifications such as CIA, CISA or CRISC will be an added advantage. EXPERIENCE

·       5 to 8 years of relevant experience in Risk Management, Internal Audit, Compliance or Internal Controls — preferably within the BFSI / Insurance sector.

·       Prior exposure to branch-level risk assessments, operational risk frameworks or business continuity reviews is desirable.

Functional / Technical Skills

·       ISO 22301 – Business Continuity Management Systems.

·       ISO 31000 – Risk Management Guidelines.

·       ISO 27001 – Information Security Management Systems.

·       Other recognized risk management certifications (e.g., CIA, CRISC, CISA, ISO 22316).

·       Advanced MS Excel – data analysis, dashboards and risk reporting.

·       Strong presentation skills (MS PowerPoint) for senior-management reporting.

·       Analytical thinking with attention to detail.

·       Effective stakeholder management and inter-departmental coordination.

·       Clear written and verbal communication.