Assistant Vice President - Infrastructure Compliances & Audits

About Us

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto Make Life Simple inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.

SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, color, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.

Join us to shape the future of digital payment in India and unlock your full potential.

What's in it for YOU

1. SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
2. Admirable work deserves to be rewarded! We have a well curated bouquet of rewards and recognition program for the employees
3. Dynamic, Inclusive and Diverse team culture
4. Gender Neutral Policy
5. Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
6. Commitment to overall development of an employee through comprehensive learning & development framework

Role Purpose

This role is responsible for ensuring Organization's IT infrastructure adherences to regulatory, security and compliance standards. This role will lead infrastructure audits, enforce governance frameworks and proactively identify risks to safeguard mission-critical banking Infrastructure. The incumbent will act as a bridge between IT operations, risk management and regulatory bodies, ensuring that infrastructure practices are secure, compliant, and audit-ready.

Role Accountability

1. Compliance Management
   • Ensure IT infrastructure complies with industry regulations (Internal and External regulatory, RBI, PCI DSS, ISO 27001, GDPR, DPDPA etc.).
   • Develop and maintain Infrastructure compliance frameworks, policies, and procedures.
2. Audit Leadership
   • Lead internal and external infrastructure audits.
   • Coordinate with auditors, regulators and stakeholders to ensure timely closure of Infrastructure related audit findings.
   • Maintain audit readiness across servers, Storages, Backup appliances, virtualization and cloud platforms.
3. Risk & Governance
   • Identify infrastructure risks and recommend mitigation strategies.
   • Establish governance processes for infrastructure change management and configuration control.
   • Ensure adherence to ITIL and COBIT practices.
4. Monitoring & Reporting
   • Implement Infrastructure compliance monitoring tools and dashboards.
   • Provide Infrastructure compliance status reports to senior management and regulators.
   • Lead internal and external infrastructure audits.
   • Coordinate with auditors, regulators and stakeholders to ensure timely closure of Infrastructure related audit findings.
   • Maintain audit readiness across servers, Storages, Backup appliances, virtualization and cloud platforms.
5. Security & Controls
   • Ensure infrastructure security controls are implemented and tested.
   • Oversee patch management, vulnerability assessments and remediation on Data Center Infrastructure assets.
6. Documentation & Standards
   • Maintain detailed documentation of compliance policies, audit reports and governance processes for Data Center Infrastructure.
   • Standardize audit procedures across IT infrastructure domains.

Measures of Success

1. Zero major regulatory non-compliance findings in infrastructure audits (Servers, Storages, Backups, Appliances, Virtualizations, VDI, SFTP etc)
2. Timely closure of 100% audit observations within agreed timelines.
3. Establishment of a robust compliance monitoring framework with automated reporting.
4. Improved infrastructure security posture (e.g., reduction in vulnerabilities by 30%).
5. High stakeholder confidence in IT compliance and governance processes.
6. Documented governance standards with 100% adherence across IT teams.

Technical Skills / Experience / Certifications

1. Compliance & Audit Frameworks: ISO 27001, PCI DSS, RBI guidelines, GDPR, SOX, COBIT, ITIL.
2. Infrastructure Knowledge: Data center operations, all type of Servers, virtualization platforms (VMware, Hyper-V, KVM), cloud environments (AWS, Azure).
3. Security Tools: Vulnerability scanners, SIEM solutions, compliance monitoring tools.
4. Experience in IT infrastructure, compliance/audit leadership and proven track record in managing regulatory audits in banking/financial services.
5. Certifications (Preferred):
   • CISA (Certified Information Systems Auditor).
   • ISO 27001 Lead Auditor.
   • CISSP or CISM.
   • ITIL v4 Foundation.

Competencies critical to the role

1. Regulatory Knowledge: Deep understanding of banking IT compliance requirements.
2. Analytical Skills: Ability to identify risks and propose effective mitigation strategies.
3. Governance & Control: Strong focus on documentation, standards, and audit readiness.
4. Stakeholder Management: Effective collaboration with auditors, regulators, and IT teams.
5. Communication: Clear and concise reporting to senior management and regulators.
6. Problem Solving: Proactive approach to resolving compliance gaps.
7. Leadership: Ability to influence IT teams to adopt compliance-first practices.

Qualification

BE /B Tech. in Computer Science/IT

Preferred Industry

NBFC / BFSI Industry