Information Technology Governance Manager

Job Title: IT Risk & Governance Lead

Location: Mumbai

Company: HDFC Securities Ltd

Company Overview

HDFC Securities Ltd, a subsidiary of HDFC Bank, is among India’s leading stockbroking and financial services companies. With a strong focus on digital innovation, cybersecurity and robust governance, we operate in a highly regulated environment where risk management and governance excellence are critical to business stability and growth.

Job Overview

As the IT Risk & Governance Lead, you will lead the enterprise-wide IT risk, governance and control framework for HSL. You will work closely with leadership, IT teams, cybersecurity and audit groups to drive a strong risk-aware culture, ensure compliance with regulatory expectations and strengthen operational resilience. Effective IT risk management, governance and cybersecurity are critical pillars of our operational excellence.

Key Responsibilities:

1. IT Risk Management & Framework Ownership

• Lead the development, implementation and maintenance of the enterprise IT risk management framework.
• Perform periodic IT risk assessments, maturity assessments and control evaluations.
• Define and track key risk indicators (KRIs) and ensure timely remediation of risk findings.

2. IT Governance & Controls

• Oversee governance structures including IT policies, standards and procedures aligned with SEBI, NSE/BSE, ISO 27001, CSCRF and other frameworks.
• Drive policy compliance, periodic reviews and version control across the enterprise.

3. Regulatory & Internal Compliance Alignment

• Ensure alignment with regulatory guidelines (SEBI, RBI, exchanges, CERT-In, privacy laws).
• Prepare for regulatory inspections, board reporting and senior management presentations.

4. Audit Coordination & Issue Management

• Lead end-to-end audit governance (SEBI audit, Statutory audit, Internal audit, SOX, cyber security audits, HDFC Bank audit etc).
• Track issues, manage closure timelines and ensure control effectiveness.

5. Business Continuity & IT Resilience

• Strengthen IT continuity and disaster recovery controls, testing frameworks and risk reporting.
• Evaluate resilience risks and advise on mitigation strategies.

6. Stakeholder & Leadership Engagement

• Collaborate with technology, cybersecurity, business and operations teams to embed governance principles.
• Represent the organization in group-level risk committees and regulatory interactions.

Qualifications, Experience & Expertise:

• Bachelor’s or Master’s in IT, Cybersecurity, Engineering, or Technology.
• 8–10 years of experience in IT risk, cybersecurity governance, IT audit, or compliance within BFSI.
• Sound knowledge of the regulatory landscape governing Indian financial institutions, including SEBI and RBI guidelines.
• Strong project management skills, with the ability to collaborate effectively with cross-functional teams.
• Excellent interpersonal and communication skills, with the ability to engage effectively with internal and external stakeholders.
• Certifications preferred: CISA, CRISC, CISSP, ISO 27001 LA.
• Demonstrated leadership abilities and strategic thinking in driving compliance initiatives.
• Familiarity with relevant regulations and compliance standards pertaining to management of IT systems in a regulated environment.
• Capital Market knowledge is must (Stock-broking experience).

Benefits:

• Competitive salary and benefits package.
• Opportunity for career growth and development.
• Exposure to a wide range of internal audit and IT governance functions.