Risk Control and governance- Finance SME

Role & responsibilities: :-

Looking a person who can support the organizations IT Governance, Risk, and Compliance (GRC) program by executing risk assessments, compliance tracking (RBI/Head Office), control testing, and audit coordination activities. The role is primarily an individual contributor who works under the guidance of the IT GRC Lead/Manager.

Preferred candidate profile :-

1) IT Governance (Execution Support)

• Support maintenance of IT governance frameworks aligned to RBI Master Directions.
• Help compile and publish periodic IT security governance reports (metrics, KRIs/KPIs, compliance status).
• Support process alignment activities by mapping IT controls to internal standards and business requirements.

2) IT Risk Management (Hands-on Assessments)

• Conduct IT/cyber risk assessments for applications, infrastructure, networks, and end-user computing environments.
• Support data risk classification and maintain information asset inventory (classification, ownership, inherent risk).
• Review security evidence from a control perspective, including:
• SIEM alerts/reports (triage support, trend reporting, control gaps)
• Firewall rule reviews (basic hygiene checks, documentation, approvals)
• Network/security device configuration evidence (as provided by Infra/SecOps)
• Track risk treatment plans and follow up closure items with IT and business owners.
• Participate in security awareness activities (campaign support, reporting completion metrics).

3) Compliance & Regulatory Reporting (Tracking + Evidence)

• Track RBI circulars/advisories applicable to IT and cyber security; support impact assessment documentation.
• Prepare compliance checklists and evidence packs for RBI and Head Office reporting.
• Monitor reporting calendars and due dates (e.g., CSITE or internal mandated submissions) and escalate risks of delay to the GRC Lead.
• Support implementation tracking for mandated controls and document compliance status.

4) IT Audit Management (Coordination + Closure Tracking)

• Support audit activities as part of the audit management team:
• Evidence collection, control walkthrough scheduling, documentation support
• Maintain audit trackers for internal/external audits, including observation status and closure evidence.
• Support closure of audit findings by coordinating with control owners and validating remediation evidence.
• Contribute to continuous control improvement actions identified through audits and risk assessments.

Role Requirements

Education & Experience

• Any Graduate
• 10 years experience in IT GRC / IT Risk / Compliance / IT Audit (preferably in Banking/Financial Services)

Knowledge & Skills (Expected at 10 Years)

• Working knowledge of RBI IT/cyber security expectations and banking audit practices.
• Strong execution capability in:
• IT risk assessment documentation and risk registers
• Control evidence review and compliance tracking
• Audit coordination and observation closure documentation
• Familiarity with SIEM reporting concepts, VA/PT governance tracking, and baseline security controls.
• Good communication and stakeholder coordination skills across IT, InfoSec, and audit teams.

Preferred Certifications

• CISA / ISO 27001 Internal Auditor or LA (preferred)