Job Description

– Team Member-IT Governance

Location Mumbai, India

Reporting To Team Lead- IT GRC

The IT GRC Team Member will support the implementation and execution of governance, risk, and compliance activities across the Bank's technology landscape. The role will focus on policy management, regulatory compliance, risk assessment, governance reporting, and continuous improvement initiatives to ensure alignment with regulatory requirements and organizational objectives. The incumbent will work closely with Technology, Risk, Compliance, Audit, and Business teams to strengthen the Bank's IT control environment.

Key Responsibilities

1. IT Governance & Framework Support

• Support implementation and maintenance of IT governance frameworks, standards, and operating procedures across the organization.
• Assist in ensuring compliance with internal governance requirements and regulatory guidelines.
• Participate in governance forums, working groups, and review meetings as required.
• Track governance actions and ensure timely closure of identified gaps.

2. Policy Management & Compliance

• Assist in drafting, reviewing, updating, and maintaining IT policies, standards, and SOPs.
• Support policy lifecycle management, including approvals, reviews, version control, and dissemination.
• Monitor adherence to approved policies and highlight exceptions or deviations.
• Maintain documentation repositories and ensure audit readiness.

3. IT Risk Management & Regulatory Compliance

• Conduct IT risk assessments and support periodic risk reviews across technology functions.
• Assist in identifying, assessing, tracking, and monitoring technology and cybersecurity risks.
• Support compliance with RBI, SEBI, and other applicable regulatory requirements.
• Coordinate with stakeholders for closure of risk observations and compliance gaps.
• Maintain risk registers and assist in risk reporting activities.

4. Process Improvement & Automation

• Support initiatives to streamline governance, compliance, and risk management processes.
• Assist in implementation and utilization of GRC tools and automation solutions.
• Identify opportunities for process optimization and enhanced control effectiveness.
• Contribute to digitization of policy, compliance, and risk management workflows.

5. Stakeholder Coordination

• Collaborate with Technology, Risk, Compliance, Internal Audit, Information Security, and Business teams.
• Support collection of information and evidence for audits, regulatory reviews, and assessments.
• Facilitate follow-up on action items arising from audits, inspections, and governance reviews.
• Assist in creating awareness around governance and compliance requirements.

6. Monitoring, Reporting & Assurance

• Prepare governance dashboards, MIS reports, KRIs, and compliance status reports.
• Track remediation plans and monitor closure of audit and regulatory observations.
• Support periodic reporting to management and relevant governance committees.
• Maintain accurate records and documentation for governance and compliance activities.

7. Learning & Capability Development

• Stay updated on regulatory developments, emerging technology risks, and industry best practices.
• Participate in training and certification programs related to IT GRC.
• Contribute to strengthening risk awareness and governance culture across teams.

Qualifications & Experience

• Graduate/Postgraduate in Engineering, Technology, Computer Science, Information Systems, Commerce, Management, or related disciplines.
• Professional certifications such as CISA, CRISC, ISO 27001, COBIT, ITIL, or similar certifications preferred.
• 4-8 years of experience in IT Governance, IT Risk Management, Information Security Compliance, Technology Audit, Operational Risk, or related functions.
• Experience in Banking, Financial Services, FinTech, Consulting, or regulated industries preferred.
• Exposure to regulatory and compliance frameworks including RBI guidelines, cybersecurity regulations, and technology risk management practices.

Skills & Competencies

• Good understanding of IT Governance, Risk, and Compliance principles.
• Knowledge of regulatory requirements applicable to the Banking and Financial Services sector.
• Familiarity with risk assessment methodologies, control testing, and compliance monitoring.
• Strong analytical, documentation, and reporting skills.
• Effective stakeholder management and coordination abilities.
• Proficiency in MS Excel, PowerPoint, and governance/risk management tools.
• Strong communication, problem-solving, and attention to detail.
• Ability to work collaboratively in a dynamic and fast-paced environment.

Key Performance Indicators (KPIs)

• Timely completion of risk assessments, compliance reviews, and governance activities.
• Quality and accuracy of governance reports, dashboards, and MIS.
• Closure rate of audit observations, compliance gaps, and risk action plans.
• Adherence to policy review and documentation timelines.
• Effectiveness of stakeholder coordination and issue resolution.
• Contribution to process improvement and automation initiatives.
• Compliance with regulatory and internal governance requirements.