Information Technology Governance Manager

Mployee.me; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Mployee.me in Pune district, Maharashtra, seeks a senior IT GRC leader to define and drive enterprise-wide governance, risk, and regulatory programs. You will champion policies, oversee audits, and coordinate with executives to strengthen information security and resilience across the organization.

The role requires deep expertise in RBI frameworks, IS auditing, and third-party risk, with a proven track record in BFSI or FinTech environments. MBA and Big4 exposure are preferred.

Qualifications

• 18+ years in IT GRC, risk, compliance, and audits.
• 8–10 years in leadership roles overseeing enterprise GRC functions.
• Experience in Banking/NBFC/BFSI/FinTech sectors.
• Proven RBI inspections and regulatory audit experience.
• Big4 consulting experience is a must.

Responsibilities

• Define and execute enterprise-wide IT GRC strategy aligned with business objectives and regulatory requirements.
• Establish governance frameworks, policies, standards, and operating procedures.
• Lead IT Governance, Risk, Compliance, and Audit forums and report to Executives and Board Committees.
• Oversee RBI/IS Audit/ITGC audits and ensure regulatory compliance.
• Own enterprise IT Risk Management Framework and drive risk mitigation.

Skills

IT GRC

Regulatory Engagement

Executive Stakeholder Mgmt

IT Audit & Controls

BCP & DR

Vendor Risk

Education

B.E./B.Tech./MCA/M.Tech in CS/IT

MBA preferred

Certifications: CISA/CISSP/CISM/CRISC/CGEIT

Job description

Key Responsibilities

Governance & Leadership

• Define and execute the enterprise-wide IT GRC strategy aligned with business objectives and regulatory requirements.
• Establish and maintain governance frameworks, policies, standards, and operating procedures.
• Lead IT Governance, Risk, Compliance, and Audit forums and provide periodic updates to Executive Management and Board Committees.

Regulatory Compliance & Audit Management

• Lead all technology-related regulatory inspections and audits including RBI, CSITE, IS Audit, ITGC, IFC, Statutory, Internal and Cyber Security Audits.
• Ensure compliance with RBI, NPCI, UIDAI, CERT-In, and other applicable regulatory requirements.

Technology Risk Management

• Own and manage the enterprise IT Risk Management Framework.
• Drive identification, assessment, mitigation, monitoring, and reporting of technology risks.
• Govern risk acceptance, remediation plans, and control effectiveness reviews.

Information Security Governance

• Provide governance oversight for Information Security and Cyber Risk programs.
• Ensure effective management of security vulnerabilities, risk assessments, VAPT observations, and security audit findings.
• Support compliance with ISO 27001, ISO 27701, RBI Cyber Security Framework, and industry best practices.

Operational Resilience & Business Continuity

• Lead Business Continuity Planning (BCP), Disaster Recovery (DR), and Operational Resilience programs.
• Oversee Business Impact Assessments (BIA), DR drills, and resilience testing.
• Ensure critical business services meet recovery and resilience objectives.

Third-Party Risk & Vendor Governance

• Establish and manage vendor governance and third-party risk management frameworks.
• Lead vendor due diligence, security assessments, self-assessments, and audits.
• Ensure compliance with RBI Outsourcing and Third-Party Risk Management Guidelines.

Continuous Improvement & Transformation

• Drive GRC transformation initiatives, process improvements, and governance automation.
• Monitor emerging regulatory requirements and industry trends.
• Strengthening controls, optimize compliance processes, and improve organizational risk maturity.

Desired Candidate Profile

Experience

• 18+ years of overall experience in IT Governance, Risk Management, Compliance, Technology Audit, Information Security, and Operational Risk.
• Minimum 8-10 years in leadership roles managing enterprise-wide GRC functions.
• Strong experience in Banking, NBFC, BFSI, or FinTech organizations.
• Proven experience handling RBI inspections, regulatory audits, technology governance, and risk management programs.
• Experience with Big 4 consulting firms is must.

Functional Expertise

• IT Governance, Enterprise Risk Management, Information Security Governance
• Regulatory Compliance, IT Audit & Controls
• Technology Risk Management, Operational Risk Management
• BCP & Disaster Recovery, Third-Party Risk Management
• RBI Regulatory Frameworks

Leadership Competencies

• Strategic Leadership
• Executive Stakeholder Management
• Regulatory Engagement

Education

• B.E./B.Tech./MCA/M.Tech in Computer Science, Information Technology, or related discipline.
• MBA preferred.

Certifications (Preferred)

• CISA/CISSP/CISM/CRISC/CGEIT