Process engineer

Job description

Responsibilities

The role if Part of the RPM/IRM Team

Design, build, enhance, and maintain company's IT Risk Program including related policies, procedures, and controls. Ensure that the Program complies with applicable laws and regulations. Actively implement or assist in the implementation of specific controls as appropriate.

Assess and monitor Information Security Risk throughout the organization and recommend safeguards designed to keep risk to acceptable levels and to comply with applicable laws and regulations.

Ensure proper remediation of our IT Risk in line with market standard, internal policies and our Risk appetite

Maintain in-depth knowledge on all policies and procedures, regulations and security procedures, as applicable to the department.

Maintain an up-to-date and comprehensive knowledge of company products, services, policies, procedures, philosophy, and organizational structure.

Stay current on related policies, procedures, and compliance by monitoring marketing updates for new campaigns, attending department meetings and complete required training

IT RISK Management Scope:
• Risk Identification
• IT Risk Assessment
• Risk response and mitigation
• Risk and Control monitoring and reporting

Profile Required

Minimum of 4-7 years of experience in IT Service Management, IT Risk Management, Technology Audit, and/or other IT, security or risk-related positions
- Understanding of internal and external threats to the confidentiality, integrity and availability of SG data and services in line with the Key IT risks identified by 2nd line of defense.
- Enforce company IT standards, policies and guidelines, where missing help and contribute to design.
- Design or help design service management tools, systems, processes to ensure the correct control of the service management processes under your direct responsibility.
- Identify risk and help manage risk in the IT environment.
- Oversee and coordinate remediation of all cyber security and technology risk management across GBSU
- Ensure processes are monitored and the progress is communicated on a regular basis.
- Create and update dashboards to communicate progress within the core areas where required.
- Capture process metrics where possible with the in-house service management tools available.
- Act as an IT Risk ambassador to all 1st Line of Defense staff and functions and assist with communication, awareness and culture where necessary.
- Ensure risk/security is always considered as part of all our processes.
- Manage the creation of Controls which will be linked to CSF's and KPI's.
- Identify weaknesses in controls and assist process owners with strengthening where required.
- Assist the IT Risk Manager with risk acceptance and communication where required.
- Where necessary define policies, standards, guidelines, procedures and work instructions.
- Ensure measurement and metrics are in place to help judge the value of the process.
- Ensure the delivered services are fit for purpose, carrying out relevant reviews as necessary
- Promote an organizational culture of awareness and appreciation for all IT Risk topics.
- Assist with data gathering and response plans for related audit missions where required.

Why Join Us

“We are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status”

Business Insight

Société Générale Global Solution Centre (SG GSC), a 100% owned subsidiary of European banking major Société Générale (SG). Our role and purpose is to enable the strategic vision of Société Générale Group. We are doing this by pioneering cutting edge innovation from Design Thinking to Smart Automation & Artificial Intelligence and applying it to banking. SG Global Solution Centre provides services in the areas of Application Development and Maintenance, Infrastructure Management, Business Process Management, and Knowledge Process Management to Société Générale's business lines around the world.

We are an equal opportunities employer and we are proud to make diversity a strength for our company. Societe Generale is committed to recognizing and promoting all talents , regardless of their beliefs, age, disability, parental status, ethnic origin, nationality, sexual or gender identity, sexual orientation, membership of a political, religious, trade union or minority organisation, or any other characteristic that could be subject to discrimination.

Job code: 2000054K
Business unit: SG Global Solution Centre
Starting date: Immediate
Date of publication: 14/04/2020