Program Management

- Develop, implement, and maintain IT governance frameworks aligned with COBIT, ISO 27001, or other industry best standards.
- Coordinate multiple related projects to meet strategic goals.
- Define program scope, objectives, and deliverables.
- Manage budgets, risks, and interdependencies.
- Facilitate cross-functional collaboration and stakeholder alignment.
- Monitor progress and report status to leadership.

Governance Framework & Strategy

- Develop, implement, and maintain IT governance frameworks aligned with COBIT, ISO 27001, or other industry best standards.
- Establish policies, standards, and procedures for IT processes across the organization.
- Monitor adherence to IT governance practices across all technology domains.

Compliance & Risk Management

- Ensure IT operations comply with regulatory, legal, and internal audit requirements (e.g., SEBI, RBI, GDPR, ISO 27001).
- Support audit activities, track remediation actions, and ensure timely closure of non-compliances.
- Perform regular risk assessments and maintain the IT Risk Register.

Audit Coordination

- Act as the central point of contact for all IT-related internal, external, statutory, and regulatory audits (e.g., SEBI, SBI).
- Coordinate with various IT and business teams to facilitate timely audit responses and evidence submission.
- Track, monitor, and report audit findings and ensure closure of audit points through corrective action plans.
- Maintain comprehensive audit logs, issue trackers, and documentation for audit readiness.

VAPT Coordination





- Plan and coordinate periodic Vulnerability Assessment and Penetration Testing (VAPT) exercises across infrastructure, networks, applications, and cloud environments.
- Liaise with external VAPT vendors, ensuring scope finalization, execution, and delivery of reports within defined timelines.
- Review VAPT findings with internal stakeholders, prioritize remediation, and track closure.
- Maintain VAPT schedules, reports, closure logs, and dashboard for reporting to IT management and regulatory authorities.

IT Risk Management

- Maintain the IT risk register and perform periodic assessments of IT and cybersecurity risks.
- Support mitigation planning and ensure regular updates to the risk posture of IT systems and assets.
- Work with cross-functional teams to embed risk-awareness culture and ensure risk control self-assessments.

Policy & Process Management

- Draft and periodically review IT policies (e.g., IT Security Policy, Acceptable Use Policy, BYOD, DR/BCP).
- Standardize IT processes such as Change Management, Incident Management, Access Control, etc.
- Promote awareness and training on IT governance policies across teams.

---

Key Skills & Competencies:

- Strong knowledge of IT Governance frameworks (COBIT, ITIL, ISO 27001).
- Solid understanding of IT risk management and regulatory compliance.
- Analytical and process-oriented mindset.
- Robust communication and stakeholder management skills.
- Attention to detail and documentation discipline.

📌 IT Governance (Mumbai)
🏢 SBI MUTUAL FUND (SBIMF)
📍 Mumbai