Assistant Vice President- IT Operational Risk

Utkarsh Small Finance Bank; Varanasi; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Utkarsh Small Finance Bank is seeking a seasoned IT Risk Leader to oversee the Operational Risk framework for core banking, digital channels, APIs, cloud infrastructure, and technology operations. You will conduct RCSA, control testing, and risk reviews to ensure robust controls and regulatory compliance.

The role requires deep RBI guideline exposure on IT Governance, Cyber Security, Digital Lending, and Outsourcing, with responsibilities to monitor KRIs, ITGC, incident management, and disaster

Qualifications

• 12+ years of experience in Operational Risk handling Information Security Risk, or Technology Governance within Banking, NBFCs, FinTechs, or Financial Services.
• Strong exposure to Core Banking Systems, Digital Banking, Payment Platforms, UPI, APIs, Cloud Infrastructure, and Vendor Risk Management.

Responsibilities

• Manager IT Operational Risk Management framework covering core banking systems, digital channels, APIs, cloud infrastructure, and technology operations.
• Conduct Risk & Control Self-Assessments (RCSA), control testing, and risk reviews across IT functions.
• Assess risks related to FinTech integrations, digital lending platforms, payment ecosystems, open banking APIs, and technology outsourcing arrangements.
• Oversee Third-Party Risk Management (TPRM), including vendor due diligence, onboarding assessments, periodic reviews, and ongoing monitoring.
• Review IT General Controls (ITGC), access management, change management, incident management, patch management, and vulnerability remediation processes.
• Monitor Key Risk Indicators (KRIs), technology incidents, operational loss events, cyber incidents, and remediation plans.
• Evaluate Information Security controls, Business Continuity Planning (BCP), Disaster Recovery (DR), and cyber resilience frameworks.
• Ensure compliance with RBI guidelines on IT Governance, Cyber Security, Digital Lending, Outsourcing, and Information Security.
• Participate in technology risk assessments for new products, system implementations, cloud migrations, and digital transformation initiatives.
• Liaise with IT, Information Security, FinTech partners, Compliance, Internal Audit, and business stakeholders for effective risk governance.
• Prepare risk dashboards, committee presentations, and reports for senior management and Risk Committees.

Skills

Operational risk management

Information security risk

Technology governance

Banking/FinTech domain

Job description

Role & responsibilities

• Manager IT Operational Risk Management framework covering core banking systems, digital channels, APIs, cloud infrastructure, and technology operations.
• Conduct Risk & Control Self-Assessments (RCSA), control testing, and risk reviews across IT functions.
• Assess risks related to FinTech integrations, digital lending platforms, payment ecosystems, open banking APIs, and technology outsourcing arrangements.
• Oversee Third-Party Risk Management (TPRM), including vendor due diligence, onboarding assessments, periodic reviews, and ongoing monitoring.
• Review IT General Controls (ITGC), access management, change management, incident management, patch management, and vulnerability remediation processes.
• Monitor Key Risk Indicators (KRIs), technology incidents, operational loss events, cyber incidents, and remediation plans.
• Evaluate Information Security controls, Business Continuity Planning (BCP), Disaster Recovery (DR), and cyber resilience frameworks.
• Ensure compliance with RBI guidelines on IT Governance, Cyber Security, Digital Lending, Outsourcing, and Information Security.
• Participate in technology risk assessments for new products, system implementations, cloud migrations, and digital transformation initiatives.
• Liaise with IT, Information Security, FinTech partners, Compliance, Internal Audit, and business stakeholders for effective risk governance.
• Prepare risk dashboards, committee presentations, and reports for senior management and Risk Committees.

Preferred candidate profile

• 12+ years of experience in Operational Risk handling Information Security Risk, or Technology Governance within Banking, NBFCs, FinTechs, or Financial Services.
• Strong exposure to Core Banking Systems, Digital Banking, Payment Platforms, UPI, APIs, Cloud Infrastructure, and Vendor Risk Management.