IT Risk Management Role - Bank

Technology Governance & Risk Management:

- Conduct and manage the full lifecycle of the Risk Control SelfAssessment (RCSA), including control identification, testing, effectiveness assessment, and documentation.

- Identify, monitor, track, and mitigate Technology risks across applications, infrastructure, processes, and thirdparty engagements.

Audit & Compliance:

- Manage all types of audits including regulatory (RBI/SEBI/MAS), internal audit, statutory audit, and concurrent audit. Support requirements for certifications including PCI DSS, ISO.

- Front-end audit engagements by coordinating with auditors, managing walkthroughs, responses, and preparing teams for examination activities.

- Conduct proactive internal checks prior to audits to assess readiness, validate evidence, and identify potential gaps in advance.

Self Identification of Issues:

- Proactively identify issues, control gaps, deviations, and process weaknesses through continuous monitoring, thematic reviews, and internal assessments.

- Track and monitor identified issues to ensure timely and effective closure with accountability across Technology teams.

Regulatory & Internal Reporting:

- Prepare and submit regulatory reports including RBI tranche reporting, Cyber Security KRO and any other Technologyrelated compliance submissions, and supervisory artefacts as required.

Risk Awareness & Culture:

- Drive a strong riskaware culture across Technology by promoting proactive identification of risks, early escalation, and transparent communication.