IT Compliance and Governance Manager

Manager - IT Compliance and Governance - Mumbai - Lodha (I-Think Techno Campus)

• Monitor an auditable governance framework, consistent with general regulatory requirements for information technology.
• Act as IT Audit SPOC. Co-ordinate with auditors like Internal Audit Department (IAD), Regulators (RBI/ NHB), Statutory Auditors and external accessors. Cadence mechanism for tracking and closure of audit observations.
• Act as SPOC for Internal Compliance processes and assessments in purview of GRC role
• Support in creation of knowledge repository
• Support / contribute to automation of manual process
• Ensure adherence to 100% accuracy of Risk control Policy and standards.
• Monitor strong IT governance, security, regulatory compliance & adherence to management model
• Running the user access management framework for IT
• Contribute to the development and maintenance of the enterprise-wide Access management and access review program including development of tools and instructional guides for business.
• Circulating KPI dashboard summary for regular status on key indicators (Financial and Non-Financial indicators)
• Monitor Vendor Onboarding, Monitoring and execution of Risk assessment framework.
• BCMS in all lines of business to coordinate business continuity governance activities
• Being proactive with issues with a problem-solving attitude, and, at the same time keeping all stakeholders aligned.
• Define and set-up SOP, templates, workflow and cadence mechanisms for ITIL compliant processes in line with RBI & NHB norms for NBFC and HFC around:
• Business Concept Note and translation into Business Requirement Document and subsequent Functional Specification document
• Capacity planning (software delivery)
• Change management
• Release management
• Incident management
• Patch management
• IT Strategy committee framework
• IT Steering committee framework
• IT Risk assessment
• CTO monthly dashboard
• Cadence meeting with business stakeholders
• Operational MIS
• Business Continuity plan
• IT strategy document