Information Technology Governance Manager

Information Technology Governance Manager

About the job :

Key Responsibilities :

Governance & Leadership :

- Define and execute the enterprise-wide IT GRC strategy aligned with business objectives and regulatory requirements.

- Establish and maintain governance frameworks, policies, standards, and operating procedures.

- Lead IT Governance, Risk, Compliance, and Audit forums and provide periodic updates to Executive Management and Board Committees.

Regulatory Compliance & Audit Management :

- Lead all technology-related regulatory inspections and audits including RBI, CSITE, IS Audit, ITGC, IFC, Statutory, Internal and Cyber Security Audits.

- Ensure compliance with RBI, NPCI, UIDAI, CERT-In, and other applicable regulatory requirements.

Technology Risk Management :

- Own and manage the enterprise IT Risk Management Framework.

- Drive identification, assessment, mitigation, monitoring, and reporting of technology risks.

- Govern risk acceptance, remediation plans, and control effectiveness reviews.

Information Security Governance :

- Provide governance oversight for Information Security and Cyber Risk programs.

- Ensure effective management of security vulnerabilities, risk assessments, VAPT observations, and security audit findings.

- Support compliance with ISO 27001, ISO 27701, RBI Cyber Security Framework, and industry best practices.

Operational Resilience & Business Continuity :

- Lead Business Continuity Planning (BCP), Disaster Recovery (DR), and Operational Resilience programs.

- Oversee Business Impact Assessments (BIA), DR drills, and resilience testing.

- Ensure critical business services meet recovery and resilience objectives.

Third-Party Risk & Vendor Governance :

- Establish and manage vendor governance and third-party risk management frameworks.

- Lead vendor due diligence, security assessments, self-assessments, and audits.

- Ensure compliance with RBI Outsourcing and Third-Party Risk Management Guidelines.

Continuous Improvement & Transformation :

- Drive GRC transformation initiatives, process improvements, and governance automation.

- Monitor emerging regulatory requirements and industry trends.

- Strengthening controls, optimize compliance processes, and improve organizational risk maturity.

Desired Candidate Profile :

Experience :

- 18+ years of overall experience in IT Governance, Risk Management, Compliance, Technology Audit, Information Security, and Operational Risk.

- Minimum 8-10 years in leadership roles managing enterprise-wide GRC functions.

- Strong experience in Banking, NBFC, BFSI, or FinTech organizations.

- Proven experience handling RBI inspections, regulatory audits, technology governance, and risk management programs.

- Experience with Big 4 consulting firms is must.

Functional Expertise :

- IT Governance, Enterprise Risk Management, Information Security Governance

- Regulatory Compliance, IT Audit & Controls

- Technology Risk Management, Operational Risk Management

- BCP & Disaster Recovery, Third-Party Risk Management

- RBI Regulatory Frameworks

Leadership Competencies :

- Strategic Leadership

- Executive Stakeholder Management

- Regulatory Engagement

Education :

- B.Tech./MCA/M.Tech in Computer Science, Information Technology, or related discipline.

- MBA preferred.

Certifications (Preferred) :

- CISA/CISSP/CISM/CRISC/CGEIT