Senior Manager - Data Governance

SBI Card; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

SBI Card is seeking a Data Governance Specialist to coordinate, embed and monitor data protection and compliance in line with SBI Card policies and applicable regulations. The role supports the Data Governance & TPR Management Lead in forming and implementing the governance framework, policy and standards.

You will conduct data security audits and assessments at vendor locations, manage risk, and work with IT and business teams to ensure data accuracy, integrity and regulatory adherence across

Qualifications

• 8-10 years of overall experience with 5-7 years in team handling.
• In-depth knowledge of data governance best practices and management of enterprise data assets.
• Experience with regulator mandated programs and complex coordination.
• Background in data management, privacy, and information security.
• Familiarity with standards like DAMA, ISO27001, PCI-DSS; audit experience.
• Strong documentation, communication and cross-functional collaboration.

Responsibilities

• Coordinate and monitor data protection and compliance per SBI Card policies.
• Assist in forming and implementing data governance framework, policy and standards.
• Conduct data security audits/assessments at vendor locations within scope.
• Evaluate effectiveness of data security controls in business processes.
• Prepare audit reports with findings and recommendations for improvement.
• Identify and define CDEs, data sets, attributes, classifications and reports.
• Manage data quality and risk across upstream and downstream data channels.
• Drive remediation of data security risks and verify through testing.
• Partner with stakeholders across IT, business and suppliers.

Skills

Data governance

Regulatory compliance

Audit & assessment

Vendor risk management

Stakeholder management

Documentation

Communication

Project management

Security controls

Education

Bachelor’s Degree in Computer Science / IT / B. Tech

Tools

ISO27001

PCI-DSS

DAMA

DSCI frameworks

EDMC

Job description

Role Purpose:

Data Governance Specialist will co-ordinate, embed and monitor data protection and compliance in accordance with SBI card policies and procedures and applicable regulations. Individual in this position is to assist Data Governance & TPR Management Lead in formation and implementation of data governance framework, policy, and standards. Should also be responsible for conducting Data security audits / assessments at the vendor locations falling under his/her scope.

Role Accountability

• Evaluating the effectiveness of the Data security controls in business process, conducting on-site audits, including reviewing documents, observing processes, and testing controls.
• Preparing audit reports that clearly articulate findings and recommendations for improvement.
• Identifying and define Critical Data Elements (CDEs), Business Term, Business Rules, Data Sets, Data Attribute, Classifications, Report Attribute etc. within business operation process
• Manage control structures within a simple environment to ensure accuracy, integrity, and quality of data through all upstream and downstream data channels.
• Conduct Data security specific risk assessments/testing from information security perspective using ISO27001, PCI-DSS, UIDAI and RBI framework to meet the organization standards & policy requirement.
• Ensure that the Data Security risks are identified, recorded, reported, and managed properly throughout the lifecycle of Risk Management framework.
• Drive and Track remediation of Risk, further perform remediation testing.
• Partner with business stakeholders across the company to raise awareness of information security, Data protection & risk management concerns.
• Monitor and report on data governance compliance, identifying and addressing any non-compliant areas.
• Act as a subject matter expert to assist the business in identifying and mitigating data security /exposure risks on their vendor relationships.
• Supports the reporting of Key Performance Indicators (KPIs), metrics and other management needs.
• Continuously review and improve data governance processes and procedures to ensure they are up-to-date and effective.
• Effectively manage cross-functional internal team third-party vendors for Data Governance Program
• Maintain relationship with IT, Business Teams and Suppliers (Third Parties) to ensure control effectives across environment

Functional areas

• Risk Management & Governance, IT Management and Business Functions
• Stakeholders: IT Teams, Business Operations Team, Third Party/Suppliers

Measures of Success

• Successful number of Data Security Assessment/Audit completed for Vendor location
• Increase in maturity of vendor risk Programs (Adoption & Capabilities).
• Development and maturity of the Data Security and Third-Party risk profiling of SBI Card
• Successful completion of data governance related projects & Initiatives within the budgeted timeline and cost
• Delivery of project plans, milestone updates, presentations, assessment reports and communications to senior management and other relevant stakeholders

Technical Skills / Experience / Certifications

• Overall Experience: 8-10 Years and Relevant Team handling/domain Experience: 5-7 Years.
• In-depth knowledge of the data governance industry best practices, business and technology issues related to management of enterprise data assets and approaches related to data protection.
• Strong experience of regulator mandated programs with complex coordination requirements
• Experience in a Data related field (Data Management, Records Management, Data Privacy, Information Security).
• Understand Data Security and Governance controls are inline to standards & frameworks such as DAMA, EDMC
• PCI-DSS, ISO27001 & audit experience. Strong ability to devise, drive and implement standard processes and best practices (both from a security and risk perspective) for all the suppliers.
• Ability to collaborate, challenge and influence peers. Passion for project-based execution and process improvement.
• Good Documentation, Communication, presentation, interpersonal Skills
• Well versed with key Data Security risks and mitigations (technology and manual) around database integrations & implementations
• Demonstrated ability to excel both independently and as a team member in a lively, collaborative environment.
• Excellent written and verbal communications skills with a demonstrated ability to make difficult concepts easy to understand.
• Industry-standard certifications such DCPP (DSCI Certified Privacy Professional), DSCI Certified Privacy Lead Assessor (DCPLA), CIPP/E etc.
• Experience managing Data Privacy/Security service providers/supplier relationships.

Competencies critical to the role

• Demonstrate skills to achieve stated objectives.
• Demonstrate communication skills to address different audiences.
• Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge technologies.
• Demonstrate teamwork & collaboration.
• Demonstrate analytical, troubleshooting, and problem-solving skills.

Qualification

Bachelor’s Degree in a related area such as Computer Science or Information Technology or B. Tech

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom