Job Summary

We are seeking an experienced Cybersecurity Risk & Compliance professional to lead enterprise cybersecurity risk management, governance, regulatory compliance, AI risk management, and Identity & Access Management (IAM) initiatives.

The role will be responsible for translating regulatory and industry requirements into effective cybersecurity controls, conducting enterprise risk assessments, driving audit and compliance programs, strengthening identity security, and providing senior management with actionable risk insights.

The ideal candidate should have strong experience in banking/financial services, with hands-on exposure to RBI, ISO 27001, ISO 42001, NIST, PCI DSS, IAM and Identity Threat Management.

Key Responsibilities

1. Cybersecurity Risk Management

- Identify, assess and prioritize information-security risks across business and technology functions.
- Develop risk mitigation strategies, risk treatment plans and remediation roadmaps.
- Monitor KRIs, control effectiveness and emerging cybersecurity risks.
- Provide risk-based recommendations to senior management and business stakeholders.

2. GRC & Regulatory Compliance

- Interpret and implement regulatory requirements from RBI, SOX, PCI-DSS, NIST .
- Translate regulatory requirements into policies, standards, procedures and security controls.
- Manage regulatory, internal and external cybersecurity audits.
- Track audit observations and drive remediation through appropriate stakeholders.
- Maintain evidence and ensure continuous compliance readiness.
- Support certification and regulatory-readiness activities aligned with ISO 27001, NIST and PCI DSS.

3. AI Risk & Governance

- Establish and maintain an AI Risk Management Framework for enterprise AI/GenAI use cases.




- Conduct AI risk and compliance assessments across data, models, prompts, applications and deployment environments.
- Develop AI security controls, risk statements, assessment checklists and governance requirements.
- Map AI controls to ISO 42001, NIST AI RMF, ISO 27001 and other applicable frameworks.
- Assess risks associated with AI identity, agentic AI, access privileges and AI-enabled applications.
- Support responsible and secure adoption of AI within regulated environments.

4. Identity & Access Management / Identity Security

- Lead IAM governance, risk assessment and control-effectiveness initiatives.
- Establish and enhance identity lifecycle, authentication, authorization, privileged access and least-privilege controls.
- Assess effectiveness of IAM security technologies and identify control gaps.
- Develop Identity Threat Detection & Response (ITDR) use cases.
- Support privileged identity and cloud identity governance.
- Drive MFA, passwordless authentication and risk-based identity protection initiatives.
- Develop and maintain enterprise Identity Fabric strategy.

5. Security Controls & Assurance

- Design, implement and assess cybersecurity controls based on organizational risk.
- Evaluate control design and operating effectiveness.
- Conduct control gap assessments and coordinate remediation with technology teams.
- Develop security-control evidence and audit documentation.




- Establish continuous monitoring mechanisms for critical controls.
- Report control weaknesses and residual risks to appropriate governance forums.

6. Stakeholder & Governance Management

- Act as a strategic interface between cybersecurity, IT, business, risk, audit and regulatory stakeholders.
- Work closely with senior management to communicate cybersecurity risks and remediation priorities.
- Prepare executive dashboards covering compliance status, risk trends, control effectiveness and remediation.
- Drive cybersecurity awareness and compliance programs across employees.
- Coordinate with auditors and regulators during assessments and reviews.

Key Skills

- Cybersecurity Risk Management
- Governance, Risk & Compliance (GRC)
- Information Security Risk Assessment
- Regulatory Compliance
- RBI & CERT-In Compliance
- AI Risk Management
- AI Governance
- ISO 42001
- ISO 27001
- NIST / NIST AI RMF
- Identity & Access Management
- Identity Threat Detection & Response
- Privileged Access Management
- Microsoft Entra ID
- Microsoft Defender for Identity
- CyberArk (PAM)
- Prisma CIEM
- MFA / FIDO2 / Passwordless
- Audit & Compliance
- Risk & Control Frameworks
- Executive Risk Reporting

Preferred Qualifications

- Bachelor's/Master's degree in Computer Science, Information Security, Cybersecurity or related discipline.
- 8+ years of experience in cybersecurity, information security risk, GRC, IAM or related functions.
- Experience within banking or financial services preferred.
- Experience working with regulators, auditors and senior business/technology stakeholders.
- Skilled certifications such as ISO 27001, ISO 42001, ISO 27701, CISM or equivalent.

📌 AVP – Cybersecurity Risk, GRC, AI Risk & Identity Security (Navi Mumbai)
🏢 HDFC Bank
📍 Navi Mumbai