HDFC Securities - IT Risk & Governance Lead

Description :

Job Title : IT Risk & Governance Lead

Location : Mumbai

Company : HDFC Securities Ltd

Company Overview :

HDFC Securities Ltd, a subsidiary of HDFC Bank, is among Indias leading stockbroking and financial services companies. With a strong focus on digital innovation, cybersecurity and robust governance, we operate in a highly regulated environment where risk management and governance excellence are critical to business stability and growth.

Job Overview :

As the IT Risk & Governance Lead, you will lead the enterprise-wide IT risk, governance and control framework for HSL. You will work closely with leadership, IT teams, cybersecurity and audit groups to drive a strong risk-aware culture, ensure compliance with regulatory expectations and strengthen operational resilience. Effective IT risk management, governance and cybersecurity are critical pillars of our operational excellence.

Key Responsibilities :

1. IT Risk Management & Framework Ownership :

- Lead the development, implementation and maintenance of the enterprise IT risk management framework.

- Perform periodic IT risk assessments, maturity assessments and control evaluations.

- Define and track key risk indicators (KRIs) and ensure timely remediation of risk findings.

2. IT Governance & Controls :

- Oversee governance structures including IT policies, standards and procedures aligned with SEBI, NSE/BSE, ISO 27001, CSCRF and other frameworks.

- Drive policy compliance, periodic reviews and version control across the enterprise.

3. Regulatory & Internal Compliance Alignment :

- Ensure alignment with regulatory guidelines (SEBI, RBI, exchanges, CERT-In, privacy laws).

- Prepare for regulatory inspections, board reporting and senior management presentations.

4. Audit Coordination & Issue Management :

- Lead end-to-end audit governance (SEBI audit, Statutory audit, Internal audit, SOX, cyber security audits, HDFC Bank audit etc).

- Track issues, manage closure timelines and ensure control effectiveness.

5. Business Continuity & IT Resilience :

- Strengthen IT continuity and disaster recovery controls, testing frameworks and risk reporting.
- Evaluate resilience risks and advise on mitigation strategies.

6. Stakeholder & Leadership Engagement :

- Collaborate with technology, cybersecurity, business and operations teams to embed governance principles.
- Represent the organisation in group-level risk committees and regulatory interactions.

Qualifications, Experience & Expertise :

- Bachelors or Masters in IT, Cybersecurity, Engineering, or Technology.

- 8 to 10 years of experience in IT risk, cybersecurity governance, IT audit, or compliance within BFSI.

- Sound knowledge of the regulatory landscape governing Indian financial institutions, including SEBI and RBI guidelines.

- Strong project management skills, with the ability to collaborate effectively with cross-functional teams.

- Excellent interpersonal and communication skills, with the ability to engage effectively with internal and external stakeholders.

- Certifications preferred : CISA, CRISC, CISSP, ISO 27001 LA.

- Demonstrated leadership abilities and strategic thinking in driving compliance initiatives.

- Familiarity with relevant regulations and compliance standards pertaining to management of IT systems in a regulated environment.

- Capital Market knowledge is must (experience working in stock broking firm).

Benefits :

- Competitive salary and benefits package.

- Opportunity for career growth and development.

- Exposure to a wide range of internal audit and IT governance functions.