Senior Manager, IT Governance

Job Overview

This role is responsible for establishing, managing, and continuously improving the organization's Governance, Risk Management, and Compliance programs. The role ensures that IT and business operations align with regulatory requirements, industry standards, internal policies, and organizational objectives while effectively managing risks.

Role & responsibilities

Audit Management:

• Serve as primary liaison for internal and external audits.
• Coordinate evidence collection, submit the timely approved response and control testing activities.
• Track audit findings, recommendations, and remediation actions.
• Drive closure of audit observations within agreed timelines.

Governance:

• Develop, implement, and maintain IT Governance frameworks, policies, standards, and procedures.
• Ensure alignment of IT initiatives with business objectives and strategic goals.
• Establish governance committees, controls, and reporting mechanisms.
• Drive policy reviews and compliance monitoring activities.
• Monitor adherence to internal control requirements and governance standards.

Risk Management:

• Lead enterprise and IT risk assessment activities.
• Identify, analyze, evaluate, and mitigate technology and cybersecurity risks.
• Maintain risk registers and facilitate risk treatment plans.
• Conduct periodic risk reviews with business and technology stakeholders.
• Develop and present risk dashboards and metrics to senior management.
• Identify and monitor RCSA and KRI as per regulatory direction/guidelines.
• Assess and Initiate BIA/FRP evaluation and execution.

Compliance Management:

• Coordinate internal and external compliance assessments.
• Manage compliance reporting and regulatory submissions.
• Track remediation of compliance findings.

Stakeholder Management:

• Partner with Business, Technology, Legal, Risk, Compliance, and Audit teams.
• Present governance, risk, and compliance updates to executive leadership.
• Influence decision-making through risk-based recommendations.
• Support strategic initiatives and transformation programs.

Third-Party Risk Management:

• Establish vendor and supplier risk governance processes.
• Review critical vendor assessments and compliance requirements.
• Ensure third-party risks are identified, assessed, and mitigated.
• Monitor ongoing compliance of strategic suppliers.
• Review third-party risk assessments and vendor compliance requirements.

Reporting & Metrics:

• Develop KPIs and KRIs for governance and risk programs.
• Prepare executive dashboards and Board-level reports.
• Provide insights on compliance posture and risk trends

Preferred candidate profile

Education:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related field.
• Master's degree preferred.

Certifications (Preferred):

• CRISC (Certified in Risk and Information Systems Control)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• CGEIT (Certified in the Governance of Enterprise IT)
• ISO 27001 Lead Implementer/Lead Auditor
• CISSP

Experience:

• 8-10 years of experience in IT Governance, Risk Management, Compliance, Information Security, or Audit.
• Experience managing regulatory audits and compliance programs.
• Proven experience implementing governance and risk frameworks.
• Experience working with senior leadership and cross-functional teams.
• Mumbai-based candidates only and Work from office is mandatory.