IT Risk & Governance Lead

About the role

The IT Risk & Governance Lead will own the enterprise‑wide IT risk, governance and control framework for HDFC Securities Ltd. Working closely with leadership, cybersecurity, audit and business teams, the role drives a risk‑aware culture, ensures regulatory compliance and strengthens operational resilience.

Key responsibilities

• Lead the development, implementation and maintenance of the enterprise IT risk management framework.
• Conduct periodic IT risk, maturity and control assessments; define and track key risk indicators.
• Oversee IT governance structures, policies and standards aligned with SEBI, NSE/BSE, ISO 27001, CSCRF and other frameworks.
• Ensure regulatory and internal compliance with SEBI, RBI, exchanges, CERT‑In and privacy laws; prepare for inspections and board reporting.
• Coordinate end‑to‑end audit governance (SEBI, statutory, internal, SOX, cybersecurity, HDFC Bank audits) and manage issue remediation.
• Strengthen business continuity, disaster recovery controls and IT resilience testing.
• Engage with technology, cybersecurity, business and operations teams to embed governance principles and represent the organization in risk committees.

Required profile

• Bachelor’s or Master’s degree in IT, Cybersecurity, Engineering or related field.
• 8–10 years of experience in IT risk, cybersecurity governance, IT audit or compliance within the BFSI sector.
• Strong knowledge of Indian financial regulatory landscape (SEBI, RBI, etc.).
• Proven project management and stakeholder engagement abilities.

Required skills

• CISA certification (preferred).
• CRISC certification (preferred).
• CISSP certification (preferred).
• ISO 27001 Lead Auditor certification (preferred).