Head of Information Technology (IT Head)

Solomon Capital; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Solomon Capital seeks an experienced IT Lead to own the day-to-day technology function for NBFC applications and infrastructure in Gurugram. You will manage user access, asset lifecycle, and security controls while ensuring RBI and audit readiness across the stack.

The role is hands-on, requiring coordination of vendor delivery, BRD/FSD creation, and change management. You will partner with business units to translate needs into technology requirements and maintain high uptime for critical

Qualifications

• Hands-on ownership of NBFC tech stack, including applications and infrastructure.
• Ability to translate business needs into technology requirements and ensure RBI/audit readiness.

Responsibilities

• Own day-to-day technology function for NBFC apps, infrastructure, IT assets, and user access.
• Manage support across LOS, LMS, collections and customer-facing apps; triage, resolve, escalate, and perform root-cause analysis.
• Oversee ticketing, SLAs, and turnaround times; monitor servers, databases, services, and jobs; ensure uptime and API health.
• Coordinate release and change management with UAT, deployment windows, and rollback plans.
• Gather requirements from functional teams and convert into BRDs/FSDs for vendors; drive end-to-end vendor delivery.
• Manage user access lifecycle, RBAC matrices, approvals, and periodic access reviews; ensure audit trails.
• Maintain IT asset register and lifecycle; manage procurement, licensing, and security posture.
• Handle core lending stack integrations (CKYC, eKYC, PAN, credit bureaus, NACH/eNACH, payment gateways).
• Coordinate VAPT and application security testing; support RBI inspection and internal audits.
• Ensure compliance with RBI Master Direction on IT governance and related directions.

Skills

Application Support

Vendor Management

RBAC & Access Control

IT Governance

Audit & Compliance

Security & DR/BCP

Systems & Integrations

Cloud & On-Prem Infrastructure

Job description

Role & responsibilities

Own the day-to-day technology function of the NBFC applications, infrastructure, IT assets, user access, vendor delivery and IT compliance. This is a hands-on role: translating business needs into technology requirements, keeping systems and services running, and ensuring the technology stack stands up to RBI and audit scrutiny.

1. Key Responsibilities

1.1 Application Support & Operations

• Manage day-to-day application support across LOS, LMS, collections and customer-facing applications issue triage, resolution, escalation and root cause analysis.
• Own the support ticketing process, SLAs and turnaround times for business users and branches.
• Monitor servers, databases, services and scheduled jobs; configure alerting and act on failures before they impact business.
• Track system uptime, batch job completion, API health and disbursal / repayment pipelines on a daily basis.
• Coordinate release and change management - UAT sign-off, deployment windows and rollback plans.

1.2 Requirement Gathering & Vendor Delivery

• Gather requirements from functional teams (Credit, Operations, Collections, Finance, Compliance, Risk) and convert them into clear, testable BRDs and FSDs for technology vendors.
• Drive vendor delivery end to end: scoping, effort and cost negotiation, timelines, milestone tracking, UAT and go-live.
• Act as the single point of accountability between business users and external development partners.
• Maintain requirement traceability - every change request logged, approved and documented.

1.3 Access Management (Functional Teams)

• Own the user access lifecycle for all business applications - joiner, mover, leaver. Provision access on onboarding, modify on role change and revoke on exit the same day.
• Define and maintain role-based access control (RBAC) matrices for each functional team, mapped to maker-checker and segregation-of-duties requirements of the lending process.
• Ensure an approval workflow for every access request - requesting manager, function head and IT sign-off - with records retained for audit.
• Conduct periodic (quarterly / half-yearly) user access reviews with function heads; remove dormant, orphaned and excess-privilege accounts.
• Manage privileged and administrator accounts separately - restricted issuance, password vaulting, logging and periodic recertification.
• Maintain audit trails and access logs as per RBI retention norms; produce access reports for IS audit and RBI inspection on demand.
• Administer email, VPN, shared drive and third-party portal access alongside core application access.

1.4 IT Asset Management

• Maintain a complete and current IT asset register - laptops, desktops, servers, network devices, mobile devices, printers and peripherals - with owner, location, configuration, warranty and AMC details.
• Own the asset lifecycle: procurement, tagging, allocation, transfer, recovery on exit and secure disposal with data-wiping certificates.
• Manage the software licence inventory and renewals; ensure no unlicensed software is in use across the organisation.
• Track cloud and hosting subscriptions, domain and SSL renewals, and vendor AMC contracts against a renewal calendar.
• Enforce endpoint standards - antivirus / EDR, patching, disk encryption and USB / data-loss controls on all company devices.
• Conduct periodic physical asset verification, reconcile against the register and report variances.
• Manage the IT capex / opex budget, vendor quotations and purchase approvals in coordination with Finance.

1.5 Systems & Integrations

• Manage the core lending stack and its integrations: CKYC, eKYC, PAN, bank statement analysers, credit bureaus (CIBIL / Experian / Equifax / CRIF), Account Aggregator, NACH / eNACH, payment gateways, e-Sign / e-Stamp and NeSL.
• Ensure integration uptime, error handling and reconciliation of failed transactions.
• Support MIS and regulatory data extraction from source systems (CIC reporting, RBI returns).

1.6 Infrastructure & Security

• Manage cloud / on-premise infrastructure - capacity, backups, cost and performance.
• Maintain the DC / DR setup and participate in periodic DR drills and BCP testing.
• Coordinate VAPT and application security testing with vendors; track remediation to closure.

1.7 Compliance & Audit

• Ensure adherence to the RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, and the RBI Digital Lending Directions (KFS, direct disbursal / repayment, LSP oversight, data storage norms).
• Support vendor due diligence and documentation under the Master Direction on Outsourcing of IT Services.
• Act as the technology point of contact for IS audit, internal audit, statutory audit and RBI inspection; close observations within agreed timelines.
• Maintain IT policy documentation, SOPs, asset and access registers, and incident logs.

Preferred candidate profile