Senior Manager - IT Risk Management

CDSL is looking for a Senior Manager/Manager to join the IT Risk Management team in Mumbai. The role involves identifying, assessing, and mitigating technology and information security risks while ensuring compliance with SEBI regulations and industry standards.

• Coordinate with departments to continuously identify, mitigate, and manage technology and information security risks.
• Define and assess Key Risk Indicators (KRI Metrics) and perform Root Cause Analysis (RCA) for IT processes.
• Execute Risk Control Self-Assessments (RCSA), assign risk ratings, and report on mitigation plans.
• Manage IT General Controls (ITGC) assessments and perform third-party risk assessments of vendors and partners.
• Facilitate IT audits, coordinate with auditors, and ensure the closure of audit findings across functional teams.
• Maintain periodic risk reporting for stakeholders and oversee Business Continuity and Regulatory Compliance programs.

• Bachelor’s or Master’s degree in Engineering, Computer Science, or MBA in Information Systems.
• Relevant certifications: CISA, CISSP, CRISC, CISM, or DISA are mandatory.
• 7-8 years of experience in IT risk management, IT audit, or IT security standards.
• Deep knowledge of frameworks like ISO 27000, NIST Cyber Security Framework, PCI-DSS, COBIT, and ITIL.
• Familiarity with SEBI regulations and Indian regulatory requirements for IT risk management.
• Expertise in GRC tools, data analysis, and assessment of IT General Controls.

• Opportunity to work with India’s leading central depository in a high-stakes financial environment.
• Professional growth in a meritocratic and regulated corporate culture.
• Exposure to enterprise-wide risk programs and advanced cyber risk security threats.
• Competitive remuneration package aligned with industry standards for senior management roles.