Risk Control Unit Manager

SBI Life; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

SBI Life is seeking a Manager in Risk Control Unit (RCU) at Mumbai Head Office to review Branch Risk Assessments, drive root cause analysis, and ensure alignment with the risk framework. The role collaborates with RRMs, Risk Owners and CRM teams to ensure timely mitigations and reporting.

Primary responsibilities include on-site engagement, performance of risk evaluations, and maintaining risk dashboards in line with ISO standards; the role also supports BCM, data protection and information

Qualifications

• 5–8 years of relevant experience in Risk Management, Internal Audit, Compliance or Internal Controls, BFSI/Insurance preferred.
• Graduate or Post-Graduate degree in Commerce, Finance, Business Administration or related discipline.

Responsibilities

• Act as first-level reviewer of Branch Risk Assessment reports and ensure completeness and alignment with risk framework.
• Coordinate with Risk Owners to agree on mitigation actions and track closure within TAT.
• Conduct selective on-site visits to validate RRMs' assessments and gather insights.
• Review reports for completeness, suggest changes to RRM, submit to next level for approval.
• Maintain RCU data bank and risk dashboards; publish monthly Risk Champion Scorecard.

Skills

Risk Management

Internal Audit

Compliance

Internal Controls

Data Analysis

Education

Graduate/Post-Graduate in Commerce/Finance/Business Administration

Tools

MS Excel

MS PowerPoint

Job description

DEPARTMENT- RISK MANAGEMENT - RISK CONTROL UNIT (RCU)

LOCATION- Mumbai - Head Office (Andheri)

JOB PURPOSE

The Manager Risk Control Unit (RCU) acts as the first-level reviewer of Branch Risk Assessment reports submitted by Regional Risk Managers (RRMs) across PAN India. The role ensures that every assessment is complete, accurate and aligned with the organisation's risk framework, drives root cause analysis and mitigation through Risk Owners, and supports the wider Risk Management agenda on business continuity, information security, data protection and risk culture.

KEY RESPONSIBILITIES

Functional Responsibility

1. Risk Evaluation & Mitigation

• Perform root-cause analysis of risks accepted from reviewed Branch Risk Assessment reports.
• Coordinate with the respective Risk Owners across departments to agree on mitigation actions.
• Track timely closure of observations within agreed turn- around timelines (TAT).
• Coordinate with RRMs and the CRM team on Sales Audit calls in cases of mis-selling complaints.

2. Branch & Regional Engagement

• Conduct selective on-site visits to branches and regions to validate RRM assessments and gather first-hand insights.
• Support evaluation of the BCM Star Assessment carried out by RRMs.
• First-level reviewer of Branch Risk Assessment reports submitted by Regional Risk Managers (RRMs) following their on-site visits to branches across PAN India.
• Each report submitted by an RRM covers five components:

1. All risks identified during the branch visit (process, people and systems risks).

2. Branch KRI Dashboard assessed from the Risk Champion Contest perspective.

3. Business Continuity Readiness Checklist.

4. Information Security Control Verification Checklist.

5. Data Protection risks observed in the region.

• The incumbent reviews each report for completeness and accuracy, recommends changes back to the RRM where required, and on closure, submits the reviewed report to the next level for approval.

3. Reporting & Dashboards

• Maintain the RCU data bank and central risk dashboard.
• Publish the monthly RCU report to Regional Risk Managers.
• Publish the monthly Risk Champion Scorecard.

4. Framework, Standards & Systems

• Contribute to the design and continuous enhancement of the Branch Risk Review module and the Risk Scorecard.
• Align the Branch Risk Assessment framework with ISO 31000, ISO 22301 and ISO 27001.
• Conduct User Acceptance Testing (UAT) for enhancements to the Risk Control module of the Operational Risk Management (ORM) System.

5. Capability Building & Risk Awareness

• Co-design training programmes and awareness modules delivered by RRMs across regions.

6. Strategic & Ad-hoc Projects

• Contribute to initiatives such as Departmental Risk Management (DRM) implementation, Risk Maturity Assessment, Organizational Resilience (ISO 22316) and the creation of Regional Risk Registers.

Qualification & Experience

• Graduate or Post- Graduate degree in Commerce, Finance, Business Administration, Management or a related discipline from a recognized institution.
• Professional certifications such as CIA, CISA or CRISC will be an added advantage. EXPERIENCE
• 5 to 8 years of relevant experience in Risk Management, Internal Audit, Compliance or Internal Controls preferably within the BFSI / Insurance sector.
• Prior exposure to branch-level risk assessments, operational risk frameworks or business continuity reviews is desirable.

Functional / Technical Skills

• ISO 22301 Business Continuity Management Systems.
• ISO 31000 Risk Management Guidelines.
• ISO 27001 Information Security Management Systems.
• Other recognized risk management certifications (e.g., CIA, CRISC, CISA, ISO 22316).
• Advanced MS Excel – data analysis, dashboards and risk reporting. Strong presentation skills (MS PowerPoint) for senior management reporting.
• Analytical thinking with attention to detail.
• Effective stakeholder management and inter-departmental coordination.
• Clear written and verbal communication.