Manager - IT Governance/Risk & Compliance - BFS

Role Overview:

A leading financial services organization is seeking an experienced IT Governance, Risk & Compliance Manager to strengthen its Information Security and IT Governance framework. The role will drive IT governance, regulatory compliance, information security standards, audit management, third-party risk, and enterprise IT risk initiatives while ensuring alignment with business objectives and applicable regulatory requirements.

Key Responsibilities:

- Develop and enhance IT governance frameworks, policies, standards, and reporting mechanisms.

- Lead IT risk assessments, maintain the IT risk register, and oversee mitigation and disaster recovery planning.

- Ensure compliance with Reserve Bank of India regulations, Digital Lending Guidelines, Master Directions, and other applicable requirements.

- Drive compliance with ISO 27001, PCI DSS, SOC 2, NIST Cybersecurity Framework, and COBIT, including control assessments and remediation.

- Manage internal, external, and regulatory audits while presenting compliance status to senior leadership.

- Lead third-party risk assessments, vendor security reviews, and organization-wide IT risk and compliance awareness initiatives.

Ideal Candidate Profile:

- 510 years of experience in IT Governance, Risk & Compliance or Information Security Governance.

- Strong exposure to NBFC, banking, financial services, or other regulated industries.

- Hands-on experience with IT risk management, governance frameworks, regulatory compliance, and audit management.

- Good understanding of ISO 27001, PCI DSS, SOC 2, NIST Cybersecurity Framework, COBIT, and cloud security controls.

- Experience working with Governance, Risk & Compliance platforms and managing cross-functional stakeholders.

- Willing to work onsite from Manesar, Gurugram.