Job Purpose

To lead Governance, Risk Management and User Access Governance activities across
IT Infrastructure, Cybersecurity and Cloud Operations. The role is responsible
for establishing governance frameworks, conducting risk and control assessments,
overseeing User Access Management (UAM) and User Access Reviews (UAR),
monitoring key technology initiatives, and providing management reporting to
ensure operational resilience, regulatory adherence and effective control
governance.

Key Responsibilities 1. Governance Framework & Policy Management
* Define, implement and maintain governance frameworks for IT Infrastructure,
Cybersecurity and Cloud Operations.
* Establish and maintain process documentation, SOPs, standards, operating
procedures and governance controls.
* Develop and monitor Key Risk Indicators (KRIs) and governance metrics.
* Evaluate adherence to approved policies, standards and operating procedures.
* Maintain a central repository of governance artefacts, approvals, process
notes and control documentation.

2. Risk Management & Control Assessment




* Conduct periodic Risk and Control Assessments for applications,
infrastructure platforms and operational processes.
* Identify technology, security and operational risks and assess the
effectiveness of existing controls.
* Maintain and monitor risk registers, remediation plans and exception
tracking.
* Review risk acceptance requests and compensating controls.
* Track identified risks and control gaps through closure.
* Provide risk oversight for recent technology deployments, infrastructure changes
and strategic initiatives.

3. User Access Governance & UAR
* Establish governance processes for User Access Management (UAM) across
infrastructure and cybersecurity platforms.
* Define and maintain Access Control Matrices (ACMs) and role-based access
models.
* Govern periodic User Access Reviews (UARs) for all infrastructure
applications and platforms.
* Ensure access certifications are completed within defined

📌 Information Security II-SUPPORT SERVICES-CTO (Mumbai)
🏢 Kotak
📍 Mumbai