Information Technology Governance Manager

Hello,

Greetings from Orient Technologies !!!

Company Profile:

Orient is a leading SI and a Premier Solution Provider in IT space. The company can execute a broad range of System Integration and do Project Management related to IT needs.

Over the past decade Orient has been working with enterprises and helping them plan and deploy IT Infrastructure for business critical applications. The experience that Orient has gained over the years from recommending IT products, consultancy in designing networks, implementing hardware/software solutions, providing hardware maintenance services extending to facilities management and complete outsourcing of operations. Being partner to most of the top IT Companies we are in a unique position to provide solutions that are proven world over.

www.orientindia.in

Department

Location

Budget : 17 LPA

Years of Experience :

Job Purpose

To lead, establish, and implement IT governance, risk, and compliance frameworks , ensuring adherence to SEBI, CSCRF, ISO standards, and supporting operational resilience in a regulated environment.

Key Roles & Responsibilities

• Develop and implement IT governance structure aligned with

  COBIT

  ,

  ISO 27001

  , and

  ISO 22301

  frameworks.
• Define, review, and maintain IT policies, standards, and procedures to ensure compliance and operational efficiency.
• Coordinate all

  regulatory and internal audits

  ; serve as the primary liaison for

  SEBI inspections

  ,

  CSCRF compliance reviews

  , and

  cyber resilience reporting

  .
• Oversee

  risk registers (RCSA)

  ,

  change control processes

  , and

  issue management

  .
• Ensure the effectiveness of the

  three lines of defence

  by working with IT operations, compliance, and audit teams.
• Conduct

  third-party/vendor risk assessments

  and periodic due diligence.
• Prepare and present governance reports and MIS for the

  Standing Committee on Technology (SCOT)

  and the Board.
• Monitor and ensure compliance with

  SEBI’s IT frameworks

  , implementing timely risk mitigation measures.

Key Deliverables

• Comprehensive

  IT Governance Framework

  &

  Policy Repository

  .

• Quarterly Risk & Compliance Dashboard

  .

• Change Control Board Reports

  and Compliance Trackers.

• Audit Readiness Plans

  and timely closure of findings.

• Vendor Risk Assessment Reports

  .

• Regulatory Compliance Matrix

  covering SEBI, ISO, CSCRF.

Required Competencies

• Strong knowledge of

  SEBI IT Governance

  &

  CSCRF Guidelines

  .
• Hands-on exposure to

  ISO 27001

  ,

  ISO 22301

  ,

  COBIT

  , and

  ITIL

  best practices.
• Expertise in

  audit management

  and compliance reporting.
• Strong communication and stakeholder management skills.
• Risk-aware decision-making with strong analytical and problem-solving abilities.

Internal Linkages

• CTO, CISO, Business Application Owners, Internal Audit, Risk & Compliance, Operations.

External Linkages

• SEBI, External Auditors, IT Vendors, Industry Working Groups.

Experience & Qualification

• Experience

  : Minimum

  15 years

  in IT Governance, Risk, or Compliance roles within capital markets.
• Prior experience in

  SEBI-regulated entities

  (Clearing Corporations, Stock Exchanges, or Depositories) preferred.

• Education

  : Bachelor’s degree in IT, Computer Science, or related field (mandatory).

• Certifications

  (preferred): CISA, CISSP, ISO 27001 Lead Auditor, COBIT.