Overview

We are seeking a strategic technology risk leader to manage the IT Risk Management function. The role will establish and strengthen enterprise-wide governance across artificial intelligence, cloud security, configuration management, cybersecurity risk, regulatory compliance, and technology assurance. The risk leader will partner with senior business and technology leaders to identify, assess, monitor, and mitigate technology risks while enabling secure innovation and digital transformation

Role

IT Risk & Governance

- Design, implement, and continuously improve the enterprise IT risk management framework, policies, and standards.
- Conduct IT risk assessments across infrastructure, applications, third parties, and emerging technologies.
- Drive risk reporting, dashboards, and heat maps for senior leadership and Board-level committees.
- Ensure alignment with regulatory and compliance requirements (ISO 27001, NIST, RBI/SEBI/IRDAI guidelines as applicable, SOX, GDPR, etc.).
- Lead internal/external IT audits, regulatory inspections, and remediation tracking.

AI Governance & Responsible AI

- Define and operationalize an enterprise AI Governance framework covering AI and generative AI use cases.
- Establish lifecycle governance for AI solutions, including intake, risk classification, approval, testing, monitoring, and retirement.
- Lead assessments covering security, privacy, bias, explainability, model integrity, ethical use, and regulatory compliance.
- Partner with Legal, Compliance, Cybersecurity, Data, Technology, and business teams to support responsible AI adoption.
- Monitor evolving AI regulations, standards, and industry practices, and translate them into actionable governance requirements.

Cloud Security & Technology Risk

- Provide risk oversight for public, private, hybrid, and multi-cloud environments, including Azure, AWS, and GCP.
- Define cloud security governance requirements for identity and access, encryption, logging, vulnerability management, resilience, and secure configuration.




- Oversee cloud risk assessments, architecture reviews, control testing, third-party evaluations, and remediation of security gaps.
- Drive adoption of continuous cloud security posture monitoring and risk-based reporting.

CMDB Governance & Configuration Management

- Own the enterprise CMDB governance framework and configuration management strategy.
- Improve the completeness, accuracy, timeliness, ownership, and integrity of configuration item data and relationships.
- Establish CMDB health metrics, data quality controls, reconciliation practices, accountability standards, and exception management.
- Partner with application, infrastructure, service management, asset management, change, incident, and resilience teams to strengthen service mapping and risk visibility.
- Drive automation of discovery, configuration tracking, reconciliation, and control monitoring.

Cybersecurity Risk, Compliance & Assurance

- Oversee cybersecurity risk assessments, control evaluations, technology assurance reviews, and remediation governance.
- Ensure alignment with applicable laws, regulations, industry standards, contractual obligations, and internal policies.
- Support internal and external audits, regulatory examinations, control testing, and evidence-based closure of findings.
- Monitor emerging cyber and technology risks and translate insights into prioritized actions.

Leadership & Stakeholder Management

- Build, lead, and develop a high-performing technology risk team with transparent accountability and succession plans.
- Partner with CIO, CISO, CRO, Compliance, Internal Audit, Engineering, Architecture, Operations,



and business leadership.
- Influence strategic decisions through practical, risk-based recommendations that balance protection, compliance, customer outcomes, and innovation.
- Promote a proactive risk culture through awareness, challenge, governance, and transparent reporting.

Role Requirements

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, Risk Management, or a related discipline; a master's degree or MBA is preferred.
- 18 to 20 years of experience across IT Risk Management, Cybersecurity, Information Security, GRC, Technology Governance, IT Service Management, or related disciplines.
- At least 8 to 10 years of progressive leadership experience, including people management and senior stakeholder engagement.
- Demonstrated experience presenting complex technology risk matters to executive leadership and governance committees.
- Proven ability to establish governance operating models, lead transformation, manage material risks, and drive cross-functional remediation.

Core Competencies

AI Governance

Responsible AI; AI/ML and GenAI risk; lifecycle governance; model oversight; bias, explainability, privacy, security, ethical use, and regulatory readiness.

Cloud Security

Azure, AWS, and GCP risk governance; cloud architecture reviews; IAM; encryption; vulnerability management; CSPM/CNAPP; logging; resilience; secure configuration.

CMDB & ITSM

ServiceNow CMDB; configuration management; discovery; reconciliation; service mapping; ITAM; data governance; CMDB health and ownership metrics.

Risk & Compliance

Enterprise and technology risk; control design and testing; audit and regulatory engagement; third-party risk; issue management; KRIs; executive and Board reporting.

Leadership

Strategic thinking; executive presence; stakeholder influence; change leadership; decision-making; communication; coaching; talent development; delivery accountability.

📌 ITRM Leader (Bengaluru)
🏢 Voya India
📍 Bengaluru