AVP – Cybersecurity Risk, GRC, AI Risk & Identity Security
HDFC Bank · Posted Oct 12
Commercial banking, retail banking, credit card, loan, and treasury services
Get a personal compatibility score
Add a resume for personal matches
About the role
HDFC Bank is seeking an experienced Cybersecurity Risk & Compliance professional to lead enterprise cybersecurity risk management, governance, regulatory compliance, AI risk management, and Identity & Access Management (IAM) initiatives. The role sits within a banking/financial services environment and works across RBI, ISO 27001, ISO 42001, NIST, PCI DSS, IAM and Identity Threat Management frameworks. The position translates regulatory and industry requirements into effective cybersecurity controls, conducts enterprise risk assessments, drives audit and compliance programs, strengthens identity security, and provides senior management with actionable risk insights.
What you will do
- Identify, assess and prioritize information-security risks across business and technology functions.
- Develop risk mitigation strategies, risk treatment plans and remediation roadmaps.
- Monitor KRIs, control effectiveness and emerging cybersecurity risks.
- Provide risk-based recommendations to senior management and business stakeholders.
- Interpret and implement regulatory requirements from RBI, SOX, PCI-DSS, NIST .
- Translate regulatory requirements into policies, standards, procedures and security controls.
- Manage regulatory, internal and external cybersecurity audits.
- Track audit observations and drive remediation through appropriate stakeholders.
- Maintain evidence and ensure continuous compliance readiness.
- Support certification and regulatory-readiness activities aligned with ISO 27001, NIST and PCI DSS .
- Establish and maintain an AI Risk Management Framework for enterprise AI/GenAI use cases.
- Conduct AI risk and compliance assessments across data, models, prompts, applications and deployment environments.
- Develop AI security controls, risk statements, assessment checklists and governance requirements.
- Map AI controls to ISO 42001, NIST AI RMF, ISO 27001 and other applicable frameworks .
- Assess risks associated with AI identity, agentic AI, access privileges and AI-enabled applications.
- Support responsible and secure adoption of AI within regulated environments.
- Lead IAM governance, risk assessment and control-effectiveness initiatives.
- Establish and enhance identity lifecycle, authentication, authorization, privileged access and least-privilege controls.
- Assess effectiveness of IAM security technologies and identify control gaps.
- Develop Identity Threat Detection & Response (ITDR) use cases.
- Support privileged identity and cloud identity governance.
- Drive MFA, passwordless authentication and risk-based identity protection initiatives.
- Develop and maintain enterprise Identity Fabric strategy.
- Design, implement and assess cybersecurity controls based on organizational risk.
- Evaluate control design and operating effectiveness.
- Conduct control gap assessments and coordinate remediation with technology teams.
- Develop security-control evidence and audit documentation.
- Establish continuous monitoring mechanisms for critical controls.
- Report control weaknesses and residual risks to appropriate governance forums.
- Act as a strategic interface between cybersecurity, IT, business, risk, audit and regulatory stakeholders.
- Work closely with senior management to communicate cybersecurity risks and remediation priorities.
- Prepare executive dashboards covering compliance status, risk trends, control effectiveness and remediation.
- Drive cybersecurity awareness and compliance programs across employees.
- Coordinate with auditors and regulators during assessments and reviews.
Skills used in this role
Preferred qualifications
- Bachelor's/Master's degree in Computer Science, Information Security, Cybersecurity or related discipline.
- 8+ years of experience in cybersecurity, information security risk, GRC, IAM or related functions.
- Experience within banking or financial services preferred.
- Experience working with regulators, auditors and senior business/technology stakeholders.
- Professional certifications such as ISO 27001, ISO 42001, ISO 27701, CISM or equivalent .
Benefits and support
- Compensation and benefits are detailed in the job posting
About HDFC Bank
HDFC Bank Limited is an Indian banking and financial services company headquartered in Mumbai. It is India's largest private sector bank by assets and market capitalization, offering a wide range of financial products including retail banking, wholesale banking, and treasury operations.
- Industry
- Banking
- Company size
- 211535 employees
- Founded
- August 1994
- Location
- Mumbai, Maharashtra, India
- Funding stage
- Public Company
Leadership
Sashidhar Jagdishan
Managing Director and Chief Executive Officer
Srinivasan Vaidyanathan
Chief Financial Officer
Ramesh Lakshminarayanan
Chief Information Officer
Vibhash Naik
Chief Human Resources Officer
Recent coverage
Businessworld
HDFC Bank May See Nine Senior Executives Reach Retirement Age By 2030October 6, 2026
Stock Titan
HDFC Bank Limited Reports Period-End Advances and Deposits for September 2026October 5, 2026
GlobeNewswire
HDFC Bank Shares Fall on Legal and Regulatory Scrutiny UpdatesOctober 7, 2026