AVP – Cybersecurity Risk, GRC, AI Risk & Identity Security

Job Summary
We are seeking an experienced Cybersecurity Risk & Compliance professional to lead enterprise cybersecurity risk management, governance, regulatory compliance, AI risk management, and Identity & Access Management (IAM) initiatives.
The role will be responsible for translating regulatory and industry requirements into effective cybersecurity controls, conducting enterprise risk assessments, driving audit and compliance programs, strengthening identity security, and providing senior management with actionable risk insights.
The ideal candidate should have strong experience in banking/financial services, with hands-on exposure to RBI, ISO 27001, ISO 42001, NIST, PCI DSS, IAM and Identity Threat Management.
Key Responsibilities
1. Cybersecurity Risk Management
Identify, assess and prioritize information-security risks across business and technology functions.
Develop risk mitigation strategies, risk treatment plans and remediation roadmaps.
Monitor KRIs, control effectiveness and emerging cybersecurity risks.
Provide risk-based recommendations to senior management and business stakeholders.
2. GRC & Regulatory Compliance
Interpret and implement regulatory requirements from RBI, SOX, PCI-DSS, NIST .
Translate regulatory requirements into policies, standards, procedures and security controls.
Manage regulatory, internal and external cybersecurity audits.
Track audit observations and drive remediation through appropriate stakeholders.
Maintain evidence and ensure continuous compliance readiness.
Support certification and regulatory-readiness activities aligned with ISO 27001, NIST and PCI DSS.
3. AI Risk & Governance
Establish and maintain an AI Risk Management Framework for enterprise AI/GenAI use cases.
Conduct AI risk and compliance assessments across data, models, prompts, applications and deployment environments.
Develop AI security controls, risk statements, assessment checklists and governance requirements.
Map AI controls to ISO 42001, NIST AI RMF, ISO 27001 and other applicable frameworks.
Assess risks associated with AI identity, agentic AI, access privileges and AI-enabled applications.
Support responsible and secure adoption of AI within regulated environments.
4. Identity & Access Management / Identity Security
Lead IAM governance, risk assessment and control-effectiveness initiatives.
Establish and enhance identity lifecycle, authentication, authorization, privileged access and least-privilege controls.
Assess effectiveness of IAM security technologies and identify control gaps.
Develop Identity Threat Detection & Response (ITDR) use cases.
Support privileged identity and cloud identity governance.
Drive MFA, passwordless authentication and risk-based identity protection initiatives.
Develop and maintain enterprise Identity Fabric strategy.
5. Security Controls & Assurance
Design, implement and assess cybersecurity controls based on organizational risk.
Evaluate control design and operating effectiveness.
Conduct control gap assessments and coordinate remediation with technology teams.
Develop security-control evidence and audit documentation.
Establish continuous monitoring mechanisms for critical controls.
Report control weaknesses and residual risks to appropriate governance forums.
6. Stakeholder & Governance Management
Act as a strategic interface between cybersecurity, IT, business, risk, audit and regulatory stakeholders.
Work closely with senior management to communicate cybersecurity risks and remediation priorities.
Prepare executive dashboards covering compliance status, risk trends, control effectiveness and remediation.
Drive cybersecurity awareness and compliance programs across employees.
Coordinate with auditors and regulators during assessments and reviews.
Key Skills
Cybersecurity Risk Management
Governance, Risk & Compliance (GRC)
Information Security Risk Assessment
Regulatory Compliance
RBI & CERT-In Compliance
AI Risk Management
AI Governance
ISO 42001
ISO 27001
NIST / NIST AI RMF
Identity & Access Management
Identity Threat Detection & Response
Privileged Access Management
Microsoft Entra ID
Microsoft Defender for Identity
CyberArk (PAM)
Prisma CIEM
MFA / FIDO2 / Passwordless
Audit & Compliance
Risk & Control Frameworks
Executive Risk Reporting
Preferred Qualifications
Bachelor's/Master's degree in Computer Science, Information Security, Cybersecurity or related discipline.
8+ years of experience in cybersecurity, information security risk, GRC, IAM or related functions.
Experience within banking or financial services preferred.
Experience working with regulators, auditors and senior business/technology stakeholders.
Professional certifications such as ISO 27001, ISO 42001, ISO 27701, CISM or equivalent.

Work arrangement
No