Company : One of the leading financial firms in Banking.

Location : Mumbai

Position : Deputy Chief Technology Officer (Dy. CTO)

Role Overview :

The Deputy Chief Technology Officer (Dy. CTO) will be a senior technology leadership position responsible for driving the Bank's technology strategy, enterprise infrastructure, information security, cyber security, digital transformation and technology governance initiatives.

The incumbent will report directly to the Chief Technology Officer (CTO) and work closely with business, technology, information security, risk, compliance and operations teams to build a secure, resilient, scalable and future-ready technology ecosystem.

Key Responsibilities :

1. Strategic Roadmap :

- Support the CTO in defining and executing the Bank's technology roadmap in alignment with business strategy, digital transformation objectives, regulatory requirements and emerging technology trends.

2. Architecture & Infrastructure :

- Drive enterprise-wide technology architecture, infrastructure modernization and adoption of next-generation technologies to enhance operational efficiency, customer experience and business agility.

- Ensure high availability, performance, maintenance, capacity planning, upgrades and optimal utilization of IT infrastructure across Data Centres, Disaster Recovery Centres, cloud environments and co-hosted facilities.

- Lead implementation, operations and lifecycle management of enterprise networking infrastructure, including WAN, LAN, SD-WAN, wireless networks, network automation and cloud networking.

3. Cyber Security & Resilience :

- Establish and maintain a secure technology environment through implementation of industry-leading cyber security controls, frameworks and best practices.

- Drive Enterprise Security Architecture based on Zero Trust principles and ensure security-by-design across technology initiatives.

- Lead network security initiatives covering Next Generation Firewalls (NGFW), Web Application Firewalls (WAF), Network Access Control (NAC), Secure Web Gateway (SWG), DDoS protection, Secure Access Service Edge (SASE), Zero Trust Network Access (ZTNA) and Micro-Segmentation.

- Oversee Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-Factor Authentication (MFA) and Access Governance solutions.

- Drive Vulnerability Management, Penetration Testing, Red Team Assessments, Security Monitoring and Cyber Incident Management programmes.

- Establish cyber resilience strategies covering ransomware preparedness, immutable backups, cyber recovery capabilities, disaster recovery planning and periodic cyber recovery drills.

- Provide strategic leadership for Cloud Security across private, public and hybrid cloud environments, including implementation of Cloud Security Posture Management (CSPM) and cloud governance controls.

4. Governance & Compliance :

- Define technology and cyber risk metrics, KRIs and management dashboards for reporting to Senior Management, IT Strategy Committees and Board-level committees.

- Work closely with the CISO, Risk Management, Internal Audit and Regulatory Compliance teams to ensure adherence to RBI guidelines, CERT-In directions, the DPDPA, Information Security policies and other applicable regulatory requirements.

- Oversee third-party technology and cyber security risk management, including security due diligence, vendor risk assessment and monitoring of managed service providers.

- Strengthen technology governance, architecture review mechanisms, change management processes, operational controls and compliance frameworks.

- Develop strong in-house technology and cyber security capabilities to reduce dependency on external vendors and service providers.

- Optimize technology investments, software licensing, cloud consumption, managed services and infrastructure contracts to improve efficiency and maximize return on investment.

- Oversee Disaster Recovery, Business Continuity Planning, cyber resilience testing and crisis management preparedness.

- Review technology contracts, architecture standards, security requirements and service delivery frameworks from operational, regulatory and security perspectives.

- Ensure timely closure of audit observations, vulnerability remediation, regulatory requirements and corrective action plans.

- Undertake any other responsibilities entrusted by the Bank from time to time in the areas of Technology, Information Security and Digital Transformation.

Educational Qualification :

- Bachelor's degree in Engineering.

- MBA will be an added advantage.

Experience Requirements :

- Minimum 20 years of post-qualification experience in Information Technology.

- Experience managing enterprise infrastructure, networking and cyber security functions.

- Experience in Data Centre, Disaster Recovery, Cloud Infrastructure and Enterprise Network Management.

- Experience at senior management level, leading large-scale IT infrastructure, network transformation and cyber security programmes.

- Experience in implementing large-scale technology transformation and modernization initiatives.

- Experience in Technology Architecture, Enterprise Infrastructure, Data Centres, Cloud Platforms, Network Architecture and Cyber Security.

- Experience in leading Security Operations Centres (SOC), Cyber Incident Response and Security Monitoring functions.

- Experience in implementing Zero Trust Architecture, Micro-Segmentation, SASE/SD-WAN, Identity & Access Management and Security Automation.

- Experience in cloud adoption and security across Public, Private and Hybrid Cloud environments.

- Experience in technology governance, IT risk management, regulatory compliance and audit management.

- Experience in vendor management, managed services governance, contract management and technology procurement.

- Exposure to Agile methodologies, DevSecOps practices and digital transformation initiatives.

Network & Infrastructure :

- Enterprise Network Architecture

- SD-WAN & WAN Optimization

- LAN/WAN Infrastructure

- Cloud Networking

- Data Centre Networking

- Software Defined Networking (SDN)

- Network Automation

Information Security & Cyber Security :

- Enterprise Security Architecture

- Zero Trust Architecture

- Network Security Architecture

- Micro-Segmentation

- Identity & Access Management (IAM)

- Privileged Access Management (PAM)

- Security Operations Centre (SOC)

Overall Candidate Profile :

The ideal candidate should be a senior technology leader with 20+ years of IT experience and strong exposure to the BFSI environment, combining expertise across enterprise infrastructure, networking, cloud, cyber security, technology architecture, risk management and digital transformation. The candidate should have demonstrated experience in managing large-scale technology environments and working closely with senior management and regulatory stakeholders.