Deputy Vice President (IT Risk)

State Bank of India (SBI); Mumbai, Navi Mumbai; On-site; INR 3,600,000 - 6,000,000; Full time

Job summary

State Bank of India (SBI) invites applications for engaged Specialist Cadre Officers on contract basis. The role requires extensive IT risk management and information security leadership with 12 years in IT, 6+ years in risk management, and certifications like CISSP/CRISC/CISM/CISA.

The selected officers will guide risk frameworks, oversee risk controls, and report to senior management. The engagement includes CTC negotiation and 3-year contract terms.

Qualifications

• BE/BTech or MCA/MSc or MTech with 50%+ marks.
• Preferred certs: CISSP, CRISC, CISM or CISA.
• Minimum 12 years IT domain experience incl. 6+ years in IT risk or information security.

Responsibilities

• Lead IT risk team and mentor members.
• Attend risk agenda and management observations.
• Analyze risk data and develop mitigation strategies.
• Prepare risk management reports for senior management.
• Oversee IT risk management policies and procedures.
• Collaborate with departments to ensure comprehensive risk controls.
• Develop and update risk assessment frameworks.

Skills

IT risk management

Information security

Regulatory compliance

Leadership

Education

BE / BTech (CS/EC/IT)

MCA / MSc (CS/IT)

MTech (CS/Cyber Security)

Tools

NIST

ISO 27001

COBIT/ITIL

Job description

ENGAGEMENT OF SPECIALIST CADRE OFFICERS ON CONTRACT BASIS

(ADVERTISEMENT NO: CRPD/SCO/2026-27/22)

ONLINE REGISTRATION OF APPLICATION & PAYMENT OF FEES: FROM 16.09.2026 TO 06.10.2026

State Bank of India invites online applications from eligible Indian citizens for engagement to the Specialist Cadre Officers Posts on Contract Basis. Candidates are requested to apply online through the link given on Banks official website https://sbi.bank.in/web/careers/current-openings

AGE: Minimum -36 years, Maximum-45 years (As on 31.08.2026)

CATEGORY WISE VACANCIES : 2 (UR), 1 (Backlog)

Contract Period: 3 years

Selection Procedure: Shortlisting & Interview followed by CTC Negotiation

DETAILS OF THE REQUIREMENTS OF EDUCATIONAL QUALIFICATIONS/POST-QUALIFICATION EXPERIENCES/SPECIFIC SKILLS /JOB PROFILE/KEY RESPONSIBILITY AREA ETC:

Educational Qualification (As on 31.08.2026):

Mandatory

Basic Qualifications: BE / BTech (Computer Science / Electronics & Communications / Information Technology/ Cybersecurity) from recognized university (Minimum percentage of Marks: 50%)

OR MCA/ MSc (Computer Science)/ MSc (IT) from recognized university. (Minimum percentage of Marks: 50%)

OR MTech in Computer Science/ Cyber Security / Information Security from recognized university. ( Minimum percentage of Marks: 50%)

Preferred certifications: Any one out of CISSP, CRISC, CISM and CISA.

(The certificate should be valid and dated on or before last date of registration of application.)

Post-Qualification Experience (As on 31.08.2026):

Minimum years of Experience: 12 years in IT Domain out of which minimum 6 years experience in IT risk management or information security is preferable.

Preferred experience details:

• 1. Deep knowledge of risk management frameworks and standards such as NIST, ISO 27001, COBIT and ITIL.
• 2.Significant experience in senior leadership roles with a proven track record of managing large-scale IT risk management programs.
• 3. Stay updated with the latest trends, technologies and best practices in IT risk management.
• 4.Demonstrated ability to develop and implement comprehensive IT risk management strategies aligned with the organizations overall business objectives.
• 5. Experience in collaborating with various departments, leading risk management projects, and ensuring compliance with regulatory requirements.
• 6. Strong understanding of advanced cybersecurity principles, technologies and trends.
• 7. Ability to develop and oversee effective incident response and business continuity plans.

Experience Certificate/ Any other Document evidencing the relevant / essential experience needs to be submitted by the applicant. Documents (s) submitted by the candidate will be considered on merit at the sole discretion of the Bank and Banks decision shall be final. (Training & Teaching experience will not be counted for eligibility).

Job Profile (Detail description of Role, Responsibilities and Functions):

Lead and mentor a team of IT risk professionals

Attend IT Risk Agenda and IT Risk related observation from the Top Management arising in the Risk related Committees

Analyze risk data and develop strategies to mitigate identified risks

Monitoring overall performance of team members

Prepare and present risk management reports to senior managements and stakeholders

Providing technical leadership, guidance, and direction on IT Risk management

Provide ability for overseeing and managing the organizations IT risk management strategies, policies and procedures

Work closely with other departments to ensure comprehensive risk management

Promote risk awareness and understanding

Development of Risk Assessment Framework aligned with regulatory guidelines/standards.

Conducting Risk Analysis/ Security Reviews of various processes with reference to Technology Risk.

REMARKS: Job profile/KRAs mentioned above are illustrative. Roles/Job/KRAs, in addition to above, may be assigned by the bank from time to time for the above posts.

KRAs for the post:

• Leading the system officers of IT-Risk Team, putting in place systems for measuring, mitigating, monitoring and controlling of IT risk by application owners in line with regulatory guidelines.
• Creating IT Risk Awareness among the stakeholders.
• Disseminate IT-Risks related guidelines / instructions / observations from Top Management / Committees / Audits / Regulator and report the progress of implementation.
• Preparing consolidated Risk Assessment report at periodical intervals and put up the same to Senior Management.
• Periodical monitoring and annual review of Key Indicators of GITC Departments.
• Development of Risk Assessment Framework aligned with regulatory guidelines/standards.
• Conducting Risk Analysis/ Security Reviews of various processes with reference to Technology Risk.
• Development of Risk Appetite Framework for Technology related domains.

REMARKS: Job profile/KRAs mentioned above are illustrative. Roles/Job/KRAs, in addition to above, may be assigned by the bank from time to time for the above posts.

SELECTION PROCESS: The selection will be based on Shortlisting and Interview. Thereafter, CTC negotiations will be held.

Shortlisting: Mere fulfilling minimum qualification and experience will not vest any right in candidate for being called for interview. The shortlisting committee constituted by the Bank will decide the shortlisting parameters and thereafter, adequate number of candidates, as decided by the Bank, will be shortlisted for interview. The decision of the Bank to call the candidates for the interview shall be final. No correspondence will be entertained in this regard. The shortlisted candidates will be called for interview.

Interview: Interview will carry 100 marks. The qualifying marks in interview will be decided by the Bank. No correspondence will be entertained in this regard.

CTC Negotiation: CTC negotiations will be done with the candidates in the order of Merit one by one (i.e., In case the selected candidate does not agree with the negotiated price, the name of the candidate shall be considered as Voluntary Exit from the engagement exercise and next candidate in the merit list shall be called for negotiation). CTC Negotiation will be done at the time of Interview or after completion of interview process, separately.

Merit list: Merit list for selection will be prepared in descending order on the basis of scores obtained in interview only. In case more than one candidate scores the cut-off marks (common marks at cut-off point), such candidates will be ranked according to their age in descending order, in the merit list.

Final Selection: Top-most candidates in the Merit List, with whom CTC is negotiated successfully, will be finally selected.

LEAVE: The proposed Officers engaged on Contract (OECs) shall be entitled to leave of 30 days during the financial year which will be granted by Bank for genuine and appropriate reasons.

Notice Period: The contract can be terminated without assigning any reason by giving 3 months notice from either side or by payment/surrender of 3 months compensation amount in lieu thereof.

CALL LETTER FOR INTERVIEW: Intimation/Call letter for interview will be sent by email or will be uploaded on Bank's website. No hard copy will be sent.

Nature of Engagement: Contractual

CTC range (Including Fixed & Variable):

Upto Rs 60.00 LACS (CTC will be bifurcated into Fixed Pay and Variable Pay in 80:20 ratio)

REMUNERATION: Annual CTC, which is negotiable, will depend upon Experience & Current Emoluments of candidates in the present employment and place of posting. The CTC comprises 80% fixed and 20% variable pay. Annual increment in CTC is subject to satisfactory annual performance. Any other Perks -NO

Variable Pay: The contractual officer shall become eligible for payment of variable pay subject to securing minimum qualifying 90% marks in the performance appraisal of the relevant period at half yearly intervals as on 31st March and 30th September subject to deduction of Income tax as per the extant Income tax rules. In case the contract ends before the completion of 6 months (from 2nd year onwards), the variable pay will be released on pro-rata basis.

10. TRAINING / TEACHING EXPERIENCE WILL NOT BE COUNTED FOR ELIGIBILITY.

11. CANDIDATE CAN NOT APPLY FOR BOTH THE POSTS.

12. In case a candidate applies for more than One post, only the last valid (completed) application of two different posts will be retained, and the application fee, if any, paid for the other registrations will stand forfeited.

14. At the time of interview, the candidate will be required to provide details regarding criminal case(s) pending against him/ her, if any. The Bank may also conduct independent verification, inter alia, including verification of police records etc. The Bank reserves the right to deny engagement depending upon such disclosures and/ or independent verification.

15. Candidates furnishing false information / suppressing the facts will be disqualified and shall be liable for debarment and legal/criminal action. Candidates who attempt fraud/impersonation shall be liable to be debarred from future engagement process conducted by the Bank

17. Candidates serving in Govt./ Quasi Govt. offices, Public Sector undertakings including Nationalized Banks and Financial Institutions and SBI Group companies are advised to submit No Objection Certificate from their employer at the time of interview, failing which their candidature may not be considered and travelling expenses, if any, otherwise admissible, will not be paid.