Information Technology Governance Manager

Job Title:

IT Risk & Governance manager

Location:

Mumbai

Company Overview

HDFC Securities Ltd, a subsidiary of HDFC Bank, is among India’s leading stockbroking and financial services companies. With a strong focus on digital innovation, cybersecurity and robust governance, we operate in a highly regulated environment where risk management and governance excellence are critical to business stability and growth.

Job Overview

As the IT Risk & Governance manager, you will lead the enterprise-wide IT risk, governance and control framework for HSL. You will work closely with leadership, IT teams, cybersecurity and audit groups to drive a strong risk-aware culture, ensure compliance with regulatory expectations and strengthen operational resilience. Effective IT risk management, governance and cybersecurity are critical pillars of our operational excellence.

Key Responsibilities

1. IT Risk Management & Framework Ownership

- Lead the development, implementation and maintenance of the enterprise IT risk management framework.
- Perform periodic IT risk assessments, maturity assessments and control evaluations.
- Define and track key risk indicators (KRIs) and ensure timely remediation of risk findings.

2. IT Governance & Controls

- Oversee governance structures including IT policies, standards and procedures aligned with SEBI, NSE/BSE, ISO 27001, CSCRF and other frameworks.
- Drive policy compliance, periodic reviews and version control across the enterprise.
- Monitor and ensure IT alignment with business objectives
- Improve and maintain IT performance management

3. Regulatory & Internal Compliance Alignment

- Ensure alignment with regulatory guidelines (SEBI, RBI, exchanges, CERT-In, privacy laws).
- Prepare for regulatory inspections, board reporting and senior management presentations.

4. Audit Coordination & Issue Management

- Lead end-to-end audit governance (SEBI audit, Statutory audit, Internal audit, SoX, cybersecurity audits, HDFC Bank audit etc).
- Track issues, manage closure timelines and ensure control effectiveness.

5. Business Continuity & IT Resilience

- Strengthen IT continuity and disaster recovery controls, testing frameworks and risk reporting.
- Evaluate resilience risks and advise on mitigation strategies.

6. Stakeholder & Leadership Engagement

- Collaborate with technology, cybersecurity, business and operations teams to embed governance principles.
- Represent the organisation in group-level risk committees and regulatory interactions.

Qualifications, Experience & Expertise

- Bachelor’s or Master’s in IT, Cybersecurity, Engineering, or Technology.
- 8–10 years of experience in IT risk, cybersecurity governance, IT audit, or compliance within BFSI.
- Sound knowledge of the regulatory landscape governing Indian financial institutions, including SEBI and RBI guidelines.
- Strong project management skills, with the ability to collaborate effectively with cross-functional teams.
- Excellent interpersonal and communication skills, with the ability to engage effectively with internal and external stakeholders.
- Certifications preferred: CISA, CRISC, CISSP, ISO 27001 LA.
- Demonstrated leadership abilities and strategic thinking in driving compliance initiatives.
- Familiarity with relevant regulations and compliance standards pertaining to management of IT systems in a regulated environment.

Benefits

- Competitive salary and benefits package.
- Opportunity for career growth and development.
- Exposure to a wide range of internal audit and IT governance functions.