Role & responsibilities

Own the day-to-day technology function of the NBFC applications, infrastructure, IT assets, user access, vendor delivery and IT compliance. This is a hands-on role: translating business needs into technology requirements, keeping systems and services running, and ensuring the technology stack stands up to RBI and audit scrutiny.

1. Key Responsibilities

1.1 Application Support & Operations
- Manage day-to-day application support across LOS, LMS, collections and customer-facing applications issue triage, resolution, escalation and root cause analysis.
- Own the support ticketing process, SLAs and turnaround times for business users and branches.
- Monitor servers, databases, services and scheduled jobs; configure alerting and act on failures before they impact business.
- Track system uptime, batch job completion, API health and disbursal / repayment pipelines on a daily basis.
- Coordinate release and change management — UAT sign-off, deployment windows and rollback plans.

1.2 Requirement Gathering & Vendor Delivery
- Gather requirements from functional teams (Credit, Operations, Collections, Finance, Compliance, Risk) and convert them into transparent, testable BRDs and FSDs for technology vendors.
- Drive vendor delivery end to end: scoping, effort and cost negotiation, timelines, milestone tracking, UAT and go-live.
- Act as the single point of accountability between business users and external development partners.
- Maintain requirement traceability — every change request logged, approved and documented.

1.3 Access Management (Functional Teams)
- Own the user access lifecycle for all business applications — joiner, mover, leaver. Provision access on onboarding, modify on role change and revoke on exit the same day.




- Define and maintain role-based access control (RBAC) matrices for each functional team, mapped to maker-checker and segregation-of-duties requirements of the lending process.
- Ensure an approval workflow for every access request — requesting manager, function head and IT sign-off — with records retained for audit.
- Conduct periodic (quarterly / half-yearly) user access reviews with function heads; remove dormant, orphaned and excess-privilege accounts.
- Manage privileged and administrator accounts separately — restricted issuance, password vaulting, logging and periodic recertification.
- Maintain audit trails and access logs as per RBI retention norms; produce access reports for IS audit and RBI inspection on demand.
- Administer email, VPN, shared drive and third-party portal access alongside core application access.

1.4 IT Asset Management
- Maintain a complete and current IT asset register — laptops, desktops, servers, network devices, mobile devices, printers and peripherals — with owner, location, configuration, warranty and AMC details.
- Own the asset lifecycle: procurement, tagging, allocation, transfer, recovery on exit and secure disposal with data-wiping certificates.
- Manage the software licence inventory and renewals; ensure no unlicensed software is in use across the organisation.
- Track cloud and hosting subscriptions, domain and SSL renewals,



and vendor AMC contracts against a renewal calendar.
- Enforce endpoint standards — antivirus / EDR, patching, disk encryption and USB / data-loss controls on all company devices.
- Conduct periodic physical asset verification, reconcile against the register and report variances.
- Manage the IT capex / opex budget, vendor quotations and purchase approvals in coordination with Finance.

1.5 Systems & Integrations
- Manage the core lending stack and its integrations: CKYC, eKYC, PAN, bank statement analysers, credit bureaus (CIBIL / Experian / Equifax / CRIF), Account Aggregator, NACH / eNACH, payment gateways, e-Sign / e-Stamp and NeSL.
- Ensure integration uptime, error handling and reconciliation of failed transactions.
- Support MIS and regulatory data extraction from source systems (CIC reporting, RBI returns).

1.6 Infrastructure & Security
- Manage cloud / on-premise infrastructure — capacity, backups, cost and performance.
- Maintain the DC / DR setup and participate in periodic DR drills and BCP testing.
- Coordinate VAPT and application security testing with vendors; track remediation to closure.

1.7 Compliance & Audit
- Ensure adherence to the RBI Master Direction on IT Governance, Risk, Controls and Assurance Practices, and the RBI Digital Lending Directions (KFS, direct disbursal / repayment, LSP oversight, data storage norms).
- Support vendor due diligence and documentation under the Master Direction on Outsourcing of IT Services.
- Act as the technology point of contact for IS audit, internal audit, statutory audit and RBI inspection; close observations within agreed timelines.
- Maintain IT policy documentation, SOPs, asset and access registers, and incident logs.

Preferred candidate profile

📌 Head of Information Technology (IT Head) (Gurugram)
🏢 Solomon Capital
📍 Gurugram