Technology Head

Designation: IT Head – Governance and Compliance REPORTS TO (SOLID & MATRIX): Technology Head Strategic Initiatives, Governance and CompliancePosition Grade: M6/ M7 , Business Unit: Shared Services - Technology, Department: Technology, Sub Function: Governance and Compliance , Location: Mumbai/ Thane, Number of Positions: 1 Position Type: Full Time Direct Reports (Position Title)    Resources: 4Job Purpose IT audit facilitation IT governance, including preparing for IT Strategy Committee  Owning compliance and regulatory projectsBusiness Continuity Management Access Management Managing Employee facing applications The role is expected to manage a team of resources and ensure that Tata Capital meets the above requirements from an IT•  Manager Audit Manager Access Management Manager Governance and Compliance Assistant Manager – Access Management Team Size Direct: 4Indirect Team Size (On-roll): 2Main AccountabilitiesQualifications & Experience: Masters in Any Stream. Minimum 10 years relevant experienceLeadership Competencies: Stakeholder management, Good communication/ articulation skills,  Exposure to budgeting, Demonstrated team-building capabilities,Adopt innovative/ cutting-edge technologiesFunctional Competencies:Competency   Required ProficiencyApplication Knowledge ExpertInfrastructure Management AdvanceProgram & project management       IntermediateTechnology Knowledge ExpertSpecialized job competencies:  Industry certification in one or more of the following: ISO, PMI, CCSA, CISA, CA, CCSP, ISC, ITIL, etc.Exposure to BFSI domain knowledge and having worked in conglomerate governed by multiple regulatorsDesired Experience: In-depth knowledge and expertise of the BSFI sector operations, including IT practices. Specific expertise should include:   A strong understanding of Access Management, Operational risk and Resilience, Business Process improvement methods as well as risk related control frameworks and practices (COCO, COSO, ISO, ITIL, CMM, COBIT, etc.) Solid knowledge of IT and Operations Audit methodology Corporate Policies and Standards of TCL and its operating subsidiaries   Solid understanding of the Operational Risk Management methodology and CSA related requirements.  Establish and monitor an auditable governance framework, consistent with general regulatory requirements for information technology. Own the role of IT Audit SPOC. Co-ordinate with auditors like Internal Audit Department (IAD), Regulators (RBI/ NHB), Statutory Auditors and external accessors. Cadence mechanism for tracking and closure of audit observations.Creation of knowledge repositoryEnsure adherence to 100% accuracy of Risk control Policy and standards.Enabling strong IT governance, security, regulatory compliance & adherence to management model   Coordinating for: Cyber security audit, Internal Audit, compliance & Process, ITGC, VAPT, GRC. SEBI Compliance System implementation assessment Setting up and running the user access management framework for ITCirculating KPI dashboard summary for regular status on key indicators (Financial and Non-Financial indicators)   Monthly review of Self Risk and Risk control Assessor and Reviewer Establish and Monitor Vendor Onboarding, Monitoring and Risk assessment framework. Part of a team of BCM-risk management professionals who work with senior management in all lines of business to coordinate business continuity governance activities Continuity planning and event management, development and facilitation of enterprise wide event exercises, relationship management with external vendors, development of corporate policy, standards, and guidelines Being proactive with issues with a problem-solving attitude, and, at the same time keeping all stakeholders aligned. Contribute to the development and maintenance of the enterprise-wide Access management and access review program including development of tools and instructional guides for business.   Define and set-up SOP, templates, workflow and cadence mechanisms for ITIL compliant processes in line with RBI & NHB norms for NBFC and HFC around: Business Concept Note and translation into Business Requirement Document and subsequent Functional Specification documentDemand tracker Capacity planning (software delivery)Change managementRelease management Incident management Patch management IT Strategy committee framework IT Steering committee framework IT Risk assessmentCTO monthly dashboardCadence meeting with business stakeholdersOperational MISBusiness Continuity plan  IT strategy document JD Written by: Rajeev MalhotraJD Approved by: Bhavin Purohit