Head - Patching and Infra Governance

Role Overview: You will be responsible for ensuring that the bank's infrastructure meets all RBI compliance requirements, including implementing security and operational controls for infrastructure systems. You will conduct regular infrastructure assessments to ensure adherence to internal security policies, industry standards, and RBI regulations. Additionally, you will lead and implement zero-day patching processes to protect infrastructure from emerging vulnerabilities and threats. Key Responsibilities: - Ensure the bank's infrastructure meets all RBI compliance requirements - Conduct regular infrastructure assessments - Lead and implement zero-day patching processes - Oversee the identification, remediation, and patching of security vulnerabilities - Define and establish best practices for patch management - Prepare and present compliance reports to senior management - Provide ongoing support during RBI audits - Work closely with internal teams such as IT, cybersecurity, and operations - Plan, coordinate, and execute patch deployment cycles - Respond to infrastructure security incidents - Monitor the environment for emerging threats - Document patching procedures, compliance assessments, and remediation efforts Qualifications: - 12+ years of experience in infrastructure compliance, patch management, and security - Strong understanding of RBI guidelines and compliance requirements - Proven experience in vulnerability management, zero-day patching, security patching, and patch deployment - Proficiency in patch management tools, security assessment platforms, and infrastructure management tools - Strong background in assessing and managing risk within IT infrastructure - Experience with supporting audits, especially in regulated environments - Relevant certifications like CISSP, CISM, CISA, or equivalent are highly desirable - Excellent verbal and written communication skills - Strong problem-solving and analytical thinking skills - Proven ability to work cross-functionally with different teams to ensure compliance and security standards are met.,