IT Compliance Manager

Kotak Mahindra Bank; Mumbai; On-site; INR 1,500,000 - 1,900,000; Full time

Job summary

Kotak Mahindra Bank is seeking an experienced IT Compliance professional in Mumbai to oversee regulatory adherence and risk assessments within the banking IT landscape. You will coordinate with regulators, implement policies, and support ISMS across the organization.

The role requires 5–8 years in banking IT compliance or assurance, with strong communication skills and knowledge of RBI/SEBI directives; certifications such as CISA/CISM/CISSP are advantageous.

Qualifications

• Graduate with 5–8 years of experience in banking IT compliance or IT assurance.
• Knowledge of compliance risk and assessment processes.
• Familiarity with RBI/SEBI directives and mandates.
• Hands-on with compliance risk assessments and regulatory audits.
• Strong written and verbal communication skills.
• Certifications such as CISA, CISM, or CISSP are a plus.

Responsibilities

• Regulatory Compliance Management for IT—stay updated on RBI Master Directions and SEBI directives.
• Liaise with RBI, SEBI, NPCI for IT compliance and related matters.
• Assist in IT policy and framework implementation aligned with mandates.
• Conduct IT compliance risk assessments and mitigate vulnerabilities.
• Coordinate regulatory inspections and audits; prepare documentation and responses.
• Prepare periodic compliance reports for senior management and regulators.
• Support ISMS implementation across the bank.
• Part of Bank-wide Compliance Risk Assessment system maintenance.
• Evaluate adequacy of risk assessments performed by first line of defense.

Skills

Regulatory compliance

IT risk assessment

Audits

ISMS

Documentation

Communication

Education

Bachelor's degree in a relevant field

Job description

Key responsibilities include:

• Regulatory Compliance Management for IT Stay updated and ensure compliance with RBI Master Directions, CSITE Guidelines, SEBI directives, etc.
• Liaison with Regulatory Bodies Serve as the primary contact for routine interactions with regulatory bodies (RBI, SEBI, NPCI) for IT compliance and related matters.
• IT Policy and Framework Implementation Assist in the development and periodic review of IT compliance frameworks, policies, and SOPs in alignment with RBI and SEBI mandates.
• Risk Management and Assessment Conduct IT compliance risk assessments; identify and mitigate vulnerabilities in the Banks IT landscape.
• Audits and Inspections – Coordinate, oversee, and prepare documentation and responses for regulatory inspections and audits.
• Reporting and Documentation – Prepare periodic compliance reports for senior management and regulatory bodies. Maintain accurate records and documentation related to IT compliance, audits, and inspections.
• Information Security Management System (ISMS) – Support the implementation of robust ISMS practices across the bank.
• Compliance Risk Assessment System – Be a part of the implementation and ongoing maintenance of the Bank-wide Compliance Risk Assessment system.
• Evaluation of Risk Assessments – Evaluate the adequacy and comprehensiveness of risk assessments performed by the first line of defense.

Job Requirements

The candidate should possess the following attributes:

• Graduate with 5–8 years of work experience in banking IT compliance teams or IT assurance roles (e.g., audits).
• Knowledge of compliance risk and its assessment.
• Good understanding of key regulatory requirements like RBI & SEBI directives and mandates.
• Hands-on experience with compliance risk assessments and regulatory audits.
• Good Communication proficiency – Verbal and Written.
• Certifications like CISA, CISM, or CISSP would be an added advantage.

Preferred Qualifications:

• Experience working in the BFSI Sector
• Experience with regulatory interactions and front-ending inspections.