Compliance Manager IT Compliance

The role is responsible for helping the organisation understand, implement and monitor compliance with RBI and other applicable requirements relating to IT, cybersecurity, information security, digital lending, outsourcing, data privacy and technology risk.

Key Roles & Responsibilities

• Interpret, analyse and provide guidance on RBI regulations, circulars, master directions and supervisory communications relating to IT Governance, Cybersecurity, Information Security, Digital Lending, IT Outsourcing, Data Privacy, Business Continuity and Technology Risk.

• Act as the Compliance Function's technology subject matter expert and support implementation of regulatory requirements across business and support functions. • Monitor compliance with regulatory requirements relating to IT Governance, Information Security, Cybersecurity, Access Controls, Audit Trails, Change Management, Patch Management, Vulnerability Management, Business Continuity Planning (BCP), Disaster Recovery (DR) and Information Systems Audit. • Conduct compliance risk assessments, compliance testing, thematic reviews and ongoing monitoring of technology-related regulatory obligations. • Maintain the IT Regulatory Compliance Register, track compliance status, identify gaps, and ensure timely closure of corrective actions. • Provide IT compliance oversight across technology infrastructure, network security and identity & access management. Review VAPT reports, cybersecurity assessments, IS audit findings and supporting the timely closure and ongoing sustenance of remediation actions.

• Support compliance oversight of Digital Lending Applications (DLAs), Lending Service Providers (LSPs), customer data protection, consent management, technology standards and outsourcing arrangements.
• Review and vet technology-related policies, procedures, frameworks, products, processes and internal circulars to ensure alignment with regulatory requirements and internal governance standards.
• Support RBI inspections, supervisory reviews, regulatory examinations and technology related audits; monitor closure of observations and Risk Mitigation Plans (RMPs).
• Prepare compliance dashboards, management information reports (MIS), regulatory impact assessments, compliance certifications, and Board/Committee review reports.
• Maintain compliance manuals, regulatory obligation inventories, policy review calendars, and technology compliance documentation.
• Conduct training and awareness programmes on technology-related regulatory requirements, cybersecurity compliance, information security and emerging technology risks.
• Liaise with IT, Information Security, Risk Management, Internal Audit, Operations and Business teams to ensure effective implementation and sustained compliance with applicable regulations.
• Perform any other responsibilities relating to technology and regulatory compliance as assigned by the Chief Compliance Officer from time to time.

Educational Qualification

• A relevant postgraduate qualification in information technology, information security, computer science, cybersecurity or related field. Experience • Minimum 4 years of relevant experience in Information technology compliance, IT risk, information security, IT Audit, cybersecurity or IT Governance within NBFCs, Banks, HFCs, FinTechs, IT Risk Consulting firms etc. • Exposure to RBI regulations, cybersecurity frameworks, IT audits and regulatory compliance requirements is preferred.