Summary
Overview
Work History
Education
Skills
Certification
Awards & Honors
Timeline
Hi, I’m

Varun Tyagi

Vice President-IT Governance, Risk & Compliance
New Delhi,DL
Varun Tyagi

Summary

Vice President, IT Governance, Risk & Compliance leading banking-wide governance, risk, and regulatory compliance programs across 15+ IT governance reviews per quarter. Drives adherence to RBI laws and regulations, strengthens vendor assessments, and aligns IT controls with business objectives across regulatory and operating requirements. Tracks 100% of policy exceptions through remediation, improving compliance issue visibility and remediation oversight.

Overview

6
Certifications
16
years of professional experience

Work History

Sumitomo Mitsui Banking

Vice President-IT Governance, Risk & Compliance
06.2022 - Current

Job overview

  • Enterprise IT Governance Leadership – Directed the IT GRC and Regulatory vertical, ensuring enterprise‑wide adherence to RBI regulations, industry frameworks, and firm‑wide standards. Aligned IT strategy with business objectives while proactively mitigating risks.
  • Regulatory & Audit Excellence – Led and successfully closed high‑stakes regulatory audits and examinations including RBI IT Examination, SWIFT Controls Audit, ISE Audit, RBI KRI Audit, Statutory Audit, and RBI Tranche reviews, consistently achieving compliance with zero major findings.
  • Strategic Risk Management – Designed and implemented robust IT compliance policies, vendor risk management frameworks, and remediation governance programs, reducing third‑party risk exposure and strengthening operational resilience.
  • Regulator Engagement & Advisory – Acted as the primary liaison with RBI, CERT‑In, IDRBT, and ReBIT, managing critical data submissions, disseminating IT regulations across business units, and advising senior management on compliance for projects and products.
  • Transformation & Efficiency Gains – Conducted gap assessments and drove process improvements that enhanced operational efficiency, streamlined compliance workflows, and ensured smooth organizational transitions during restructuring.
  • Track 100% of policy exceptions through remediation to keep compliance issues visible and moving toward closure.
  • Maintain 15+ IT governance reviews per quarter to support adherence to RBI regulations, company policies, and firm-wide standards.
  • Align IT governance activities with business goals while managing risk across regulatory and operating requirements.
  • Strengthen vendor assessments, risk management, and remediation governance to improve oversight of third-party exposure.
  • Coordinate audit planning and control testing in JIRA and ServiceNow to support consistent execution and documentation.

Standard Chartered Bank

Data Privacy Lead
08.2021 - 06.2022

Job overview

  • Manage 100% of data subject requests within required timelines while coordinating compliant responses.
  • Track privacy incidents per quarter while documenting escalation, investigation, and regulatory reporting actions.
  • Developed privacy policies and procedures that strengthened data protection, record management, and broader privacy compliance.
  • Assessed data management, privacy, and record management risks, and supported monitoring and mitigation activities.
  • Partnered with product and cross-functional teams to embed privacy requirements into new product development and third-party agreements.
  • Led privacy impact assessments, vendor privacy reviews, and issue remediation tracking to reduce personal data processing risk.
  • Advised senior leaders and regulators on privacy matters, delivered employee training, and promoted continuous improvement across the function.

Canara Bank

Lead IT Auditor-Sr. Manager
07.2012 - 07.2021

Job overview

  • Maintain 100% compliance coverage by aligning audit activity with regulatory requirements and current industry standards.
  • Track 20+ audit engagements per quarter while balancing competing deadlines across regulatory and internal review cycles.
  • Planned audit schedules, allocated resources, and managed multiple concurrent engagements without missing quality or deadline expectations.
  • Conducted risk assessments, identified control gaps, and recommended improvements across processes, procedures, and systems.
  • Led information security audits, including GDPR, ISMS, SOC, PCI-DSS, and London Branch reviews across infrastructure and cloud environments.
  • Directed data centre, SWIFT, firewall, VPN, DR, and migration audits, covering physical security, logical access, and resilience controls.
  • Managed vendor oversight, mentored junior auditors, and coordinated timely remediation of vulnerabilities and external audit findings.

Sumangalam Pvt. Ltd.

Manager
08.2010 - 07.2012

Job overview

  • Conducted market research, identified prospective accounts, and converted leads into the sales cycle.
  • Administered IT infrastructure by managing user roles, access privileges, and ensuring continuous operations.
  • Supervised daily activities, mentored team members, and optimized overall performance.
  • Maintained strong customer relationships by resolving disputes quickly and delivering high‑quality service.
  • Developed strategic plans to drive revenue growth and expand market presence.

Education

FMS- Banaras Hindu University (BHU)
Varanasi

PGDM
04-2010

Amity University
Noida, Delhi

Bachelor of Technology
06-2008

Skills

Strategic thinking

Regulatory Guidelines and Master Directions

Gap Assessment & Remediation

People management

Third Party Control Assurance

JIRA

ServiceNow

IT governance

Risk assessment

Control testing

Audit planning

Vendor risk management

CISA certification

ISO 27001 lead auditor certification

Risk register management

Issue remediation tracking

Compliance reporting

Control self-assessment

Policy exception management

NIST CSF mapping

Audit evidence management

Certification

GRC-A (Certified GRC Auditor)

Awards & Honors

  • Annual Award FY22-23 for Delivery Excellence,
    Process Adherence & Operations Champion at
    SMBC India.
  • Quarterly Award Oct'22 for Team Excellence at
    SMBC India.

Timeline

Vice President-IT Governance, Risk & Compliance

Sumitomo Mitsui Banking
06.2022 - Current

Data Privacy Lead

Standard Chartered Bank
08.2021 - 06.2022

Lead IT Auditor-Sr. Manager

Canara Bank
07.2012 - 07.2021

Manager

Sumangalam Pvt. Ltd.
08.2010 - 07.2012

FMS- Banaras Hindu University (BHU)

PGDM

Amity University

Bachelor of Technology
Varun TyagiVice President-IT Governance, Risk & Compliance