Ticker IMPORTANT ALERT ! Beware of Fake AMC App, Online Impersonation & Scam WhatsApp Groups.

Ticker Close

Aditya Birla Sun Life AMC Limited

Rishi Awasthi Chief Information Security Officer

Leadership Team

Mr. Rishi Awasthi is an Information Security and Cyber Risk Professional with over 14 years of experience across BFSI, Technology, Telecom and Consulting Sectors. Prior to joining the Company, Mr. Awasthi was Lead - Privacy and IS Audit at Aditya Birla Capital Limited ('ABCL'), where he was responsible for driving enterprise-wide initiatives relating to Cybersecurity Governance, Risk Management, Regulatory Compliance and Data Privacy. Prior to that, Mr. Awasthi worked with RSM India, Willis Towers Watson, Deloitte India and Tata Consultancy Services where he held roles spanning Cyber Security, IT Assurance and Technology Risk.


Mr. Awasthi holds a Bachelor's of Technology (B. Tech) in Computer Science Engineering, Master of Business Administration (MBA) in IT Business Management and he has also completed the General Management Programme from ISB. He is professionally certified in CISA, CISM, CRISC, CDPSE and Associate C|CISO, among other globally recognized Cybersecurity credentials.

Roles & Responsibilities with respect to Risk Management Roles & Responsibilities with respect to Risk Management
Sn
Particulars
1
Formulate and implement Information Security and Cyber security risk management policies
2
Provide relevant information to CRO regarding the information Security and Cyber risks
3
For the relevant functional risks, identify, analyze and report and escalate the following to the CRO and CEO along with recommended action plan for Early warning signals, Emerging risks, Major findings, Near miss and loss events and fraud incidents.
4
Ensure adherence to the guidelines pertinent to SEBI in respect of RMF and relevant principles thereunder including risk identification, risk management, risk reporting (both periodic and escalation of material incident) and corrective actions taken.
5
Formulate and review the RCSA for key risks and controls and periodically provide inputs to update the RCSA for the Information security area.
6
Responsible for the governance (incl. reputation and conduct risk associated for the respective function)
7
Maintaining risk level as per the risk metric
8
Define specific responsibilities regarding risk management of key personnel reporting to CISO
9
Undertake immediate corrective action for non-compliance or major finding post approval from CEO as per DoP and shall report to CRO regarding the risk reports.
10
Perform adequate due diligence of outsourced vendors prior to onboarding
11
Ensure periodic assessment of outsourced vendors considering following elements:
  • Review of vendors' people, systems and processes
  • Documentation and communication of error tolerance and code of conduct and monitoring breaches
  • Monitor fraud vulnerabilities in the outsourced process
  • Report SLA breaches