Network - Compliance & Audit Management
Kotak Mahindra Bank · Mumbai Suburban, Navi Mumbai
- Company
- Kotak Mahindra Bank
- Type
- Job
- Work mode
- On-site
- Location
- Mumbai Suburban, Navi Mumbai
- Posted
- 30 Oct 2026
About this job
Position Summary
We are seeking an experienced Network Compliance & Audit Management professional to lead governance, compliance, audit readiness, risk reporting, and security adherence activities across the network infrastructure domain. The role will be responsible for driving monthly KRI reporting, capacity management governance, patch compliance tracking, exception management, audit coordination, evidence collection, regulatory compliance support, and ensuring adherence to internal and external security standards. The individual will act as the focal point between Network Operations, Information Security, Risk, Audit, Compliance, and Technology stakeholders.
Key Responsibilities
- Own and manage end-to-end compliance and audit activities for the Network Infrastructure function.
- Prepare and publish monthly Key Risk Indicator (KRI) and management reporting dashboards.
- Monitor network capacity management processes and ensure compliance with capacity planning and utilization standards.
- Drive patch management, governance and track remediation of vulnerabilities and compliance gaps.
- Monitor compliance with security baselines, hardening standards, and regulatory requirements.
- Maintain and govern exception management processes, including risk assessments, approvals, renewals, and closure tracking.
- Coordinate internal, external, regulatory, and information security audits affecting network infrastructure.
- Collect, validate, and present audit evidence, artefacts, reports, configurations, and supporting documentation.
- Prepare management responses, remediation plans, and closure updates for audit observations.
- This is an Internal document.
- Track audit findings, risk treatment plans, and corrective actions until successful closure.
- Partner with Information Security, Risk Management, Compliance, SOC, Infrastructure, and Application teams to ensure policy adherence.
- Conduct periodic compliance reviews and readiness assessments across network technologies and processes.
- Develop and maintain SOPs, governance documents, control frameworks, and compliance documentation.
- Prepare teams for security assessments, regulatory reviews, vulnerability assessments, and penetration testing activities.
- Support technology governance reviews and management presentations related to compliance posture and risk exposure.
- Identify opportunities for automation and process improvement in compliance reporting and audit management.
Required Skills & Experience
- 6 to 8+ years of experience in Network Infrastructure, IT Governance, Compliance, Audit
Management, Information Security, or related domains.
- Strong understanding of enterprise network technologies including LAN, WLAN, WAN,
Data Centre, NAC, Internet, Cloud Connectivity, Load Balancers, and Network Security controls.
- Experience managing technology audits, regulatory inspections, and compliance assessments.
- Knowledge of IT risk management frameworks and control environments.
- Strong understanding of vulnerability management, patch compliance, exception governance, and risk reporting.
- Experience in preparing executive dashboards, KRIs, KPIs, and governance reports.
- Excellent stakeholder management, documentation, presentation, and communication skills.
- Ability to coordinate with multiple technology teams and manage competing priorities.
Preferred Qualifications
- Network domain certifications like CCNA/CCNP or relevant network domain work experience.
- Certifications such as CISA, CRISC, ISO 27001, CISSP, ITIL, COBIT, or equivalent.
- Experience in Banking, Financial Services, or highly regulated environments.
- Exposure to RBI, PCI-DSS, ISO 27001, SWIFT, NIST, or similar compliance frameworks.
This is an Internal document.
Key Success Measures
- Timely and accurate reporting as per schedule.
- Improved patch compliance and security control adherence.
*…
Listed from the company's public job post; the company is responsible for it. Always apply on the official page and never pay to apply. How listings work