Deputy Manager - IT Governance

• Job Title: Deputy Manager - IT Governance

• Reporting Manager: Head - Information Technology

• Job Location

  - SBIFM Corporate Office

• Role Description:

The IT Governance Lead is responsible for establishing and overseeing the IT governance framework to ensure alignment of IT initiatives with business objectives, compliance with regulatory requirements, and effective risk management. This role acts as a bridge between IT, Infosec and business, ensuring that IT policies, controls, and processes are well defined, communicated, monitored, and continuously improved.

• Responsibilities

Governance Framework & Strategy

• Develop, implement, and maintain IT governance frameworks aligned with COBIT, ISO 27001, or other industry best standards.
• Establish policies, standards, and procedures for IT processes across the organization.
• Monitor adherence to IT governance practices across all technology domains.

Compliance & Risk Management

• Ensure IT operations comply with regulatory, legal, and internal audit requirements (e.g., SEBI, RBI, GDPR, ISO 27001).
• Support audit activities, track remediation actions, and ensure timely closure of non-compliances.
• Perform regular risk assessments and maintain the IT Risk Register.

Audit Coordination

• Act as the central point of contact for all IT-related internal, external, statutory, and regulatory audits (e.g., SEBI, SBI).
• Coordinate with various IT and business teams to facilitate timely audit responses and evidence submission.
• Track, monitor, and report audit findings and ensure closure of audit points through corrective action plans.
• Maintain comprehensive audit logs, issue trackers, and documentation for audit readiness.

VAPT Coordination

• Plan and coordinate periodic Vulnerability Assessment and Penetration Testing (VAPT) exercises across infrastructure, networks, applications, and cloud environments.
• Liaise with external VAPT vendors, ensuring scope finalization, execution, and delivery of reports within defined timelines.
• Review VAPT findings with internal stakeholders, prioritize remediation, and track closure.
• Maintain VAPT schedules, reports, closure logs, and dashboard for reporting to IT management and regulatory authorities.

IT Risk Management

• Maintain the IT risk register and perform periodic assessments of IT and cybersecurity risks.
• Support mitigation planning and ensure regular updates to the risk posture of IT systems and assets.
• Work with cross-functional teams to embed risk-awareness culture and ensure risk control self-assessments.

Policy & Process Management

• Draft and periodically review IT policies (e.g., IT Security Policy, Acceptable Use Policy, BYOD, DR/BCP).
• Standardize IT processes such as Change Management, Incident Management, Access Control, etc.
• Promote awareness and training on IT governance policies across teams.

Key Skills & Competencies:

• Strong knowledge of IT Governance frameworks (COBIT, ITIL, ISO 27001).
• Solid understanding of IT risk management and regulatory compliance.
• Analytical and process-oriented mindset.
• Strong communication and stakeholder management skills.
• Attention to detail and documentation discipline.

Qualifications & Experience

• B. Tech/B.E./MBA / Graduation/Diploma (IT /Electronics)