Head - IT Governance & Technology Risk

Description:

Role Objective

To define, own, and strengthen CSB Banks IT Governance and Technology Risk framework, ensuring regulatory compliance, cyber resilience, and risk-aligned digital growth in line with RBI guidelines, industry standards, and the Banks strategic objectives.

The role is responsible for end-to-end oversight of IT Governance, Information & Cyber Security risk, regulatory compliance, and technology control assurance, acting as a key interface with regulators, auditors, senior management, and the Board.

Key Responsibilities

1. IT Governance Framework & Oversight

- Establish and maintain a robust IT Governance framework aligned with RBI IT & Cyber Security Guidelines, COBIT, ITIL, ISO 27001/20000, and global best practices.

- Ensure strategic alignment of IT initiatives with business objectives, risk appetite, and regulatory expectations.

- Define IT governance structures, policies, standards, procedures, and decision-making forums.

- Drive periodic IT maturity assessments and continuous improvement initiatives.

2. Technology Risk Management

- Lead the Technology Risk Management (TRM) function across applications, infrastructure, cloud, digital platforms, and third-party environments.

- Identify, assess, monitor, and mitigate IT and Cyber Risks, including emerging and systemic risks.

- Define and monitor KRIs, KPIs, and risk dashboards for senior management and Board reporting.

- Ensure effective root cause analysis and remediation tracking for risk events and control failures.

3. Regulatory Compliance & RBI Engagement

- Ensure compliance with RBI Master Directions, Cyber Security Framework, advisories, and supervisory expectations.

- Act as the single point of accountability for RBI IT / Cyber inspections, observations, and regulatory correspondence.

- Oversee timely regulatory submissions, certifications, and returns related to IT and technology risk.

- Proactively assess regulatory changes and drive gap assessments and implementation programs.

4. Information & Cyber Security Governance

- Provide governance oversight to Information Security and Cyber Security programs of the Bank.

- Ensure effective ISMS (ISO 27001) governance, certification, and ongoing compliance.

- Review and guide security strategy covering:

Application & Infrastructure Security

Cloud & Digital Banking Security

Data Protection & Privacy

SOC, Incident Response & Cyber Resilience

5. Audit, Assurance & Control Effectiveness

- Provide oversight to IT Internal Audits, Regulatory Audits, IS Audits, and External Audits.

- Ensure strong control design and operating effectiveness across IT processes.

- Drive closure of audit observations with focus on zero repeat findings.

- Present audit and risk matters to Audit Committee of the Board and IT Strategy Committee.

6. Third-Party & Outsourcing Risk

- Govern third-party / vendor technology risk, including cloud service providers, fintech partners, and outsourced IT services.

- Ensure compliance with RBI outsourcing guidelines, data protection requirements, and contractual risk obligations.

- Oversee vendor risk assessments, audits, and remediation.

7. Policy, Standards & Awareness

- Own and approve IT, Information Security, Cyber Security, and Technology Risk policies.

- Ensure policies are periodically reviewed and aligned with regulatory and business changes.

- Drive organization-wide awareness programs on technology risk, cyber security, and compliance culture.

8. Leadership & Stakeholder Management

- Act as a trusted advisor to CIO, CRO, CEO, and Board Committees on technology risk and governance matters.

- Lead and mentor senior managers and specialized teams across governance, risk, and compliance.

- Collaborate with business, operations, legal, compliance, and audit functions to enable secure digital growth.

Key Skills & Competencies

- IT Governance & Technology Risk Leadership

- RBI Regulations & Supervisory Framework

- Cyber Security & Information Security Governance

- Enterprise & Operational Risk Management

- Regulatory & Audit Management

- Policy Framework Design & Control Assurance

- Board & Regulator Communication

- Strong analytical, decision-making, and leadership capabilities

Qualifications & Experience

Education

- Bachelors degree in Engineering / Computer Science / Information Technology

- Masters degree in Management / Information Systems / Technology (preferred)

Certifications (Preferred)

- CISA

- CRISC

- CISSP

- ISO 27001 Lead Implementer / Lead Auditor

- ITIL / COBIT

Experience: 16+ years of progressive experience in Banking / Financial Services, with significant exposure to:

- IT Governance

- Technology & Cyber Risk

- RBI regulatory compliance

- Senior leadership and regulator-facing roles