Kamini Serpikhi

Technology Risk and Cyber GRC leader with 19+ years across banking, payments, fintech, and RBI-regulated financial infrastructure — including supervisory-side experience at India's central banking technology arm (ReBIT), assessing cyber and technology risk posture across banks, NBFCs, fintechs, and payment system operators nationally. Deep expertise spans payment ecosystem security (card network and payment aggregator compliance), model risk governance, third-party/outsourcing risk, and regulatory examination readiness under RBI frameworks. Extending traditional model risk discipline (Basel II RWA model validation and UAT) into governance of AI/ML and GenAI systems, aligned to ISO/IEC 42001 and the NIST AI Risk Management Framework, as regulatory expectations for AI-enabled financial infrastructure evolve.

Senior Manager – Cybersecurity & Risk Specialist at Reserve Bank Information Technology Pvt. Ltd. (ReBIT) (2022-10 – Present)

• Lead cybersecurity and technology risk examinations (audits) across banks, NBFCs, fintechs, and payment system operators nationally, covering cyber resilience, digital payments, APIs, cloud environments, and critical financial infrastructure.
• Designed standardized IT and cyber risk assessment templates adopted across regulated entities, improving consistency and audit-readiness.
• Advise senior stakeholders and boards on systemic cyber risks impacting payment ecosystems, digital channels, ATM networks, and third-party technology partners.
• Reviewed cybersecurity posture of fintechs and critical financial market infrastructures, addressing APT risk and emerging threats.
• Lead the DPSS examination team — setting review priorities, allocating examiner resources across concurrent regulatory examinations, and acting as primary escalation point for stakeholder issues.

Vendor Risk & Compliance Manager (Sr. Manager) at Axis Bank (2021-12 – 2022-09)

• Led enterprise technology and cyber risk reviews for digital transformation, fintech integrations, and strategic IT initiatives.
• Established and governed third-party and outsourcing risk frameworks aligned with RBI guidelines and global best practice.
• Oversaw BCP/DR planning and crisis simulation exercises for critical banking and payment systems.
• Embedded security-by-design into products and vendor engagements in partnership with business and technology leadership.

IT / Cybersecurity Risk Officer (Manager IT) at Central Bank of India (2010-01 – 2021-11)

• Led enterprise cybersecurity governance across core banking, digital channels, and infrastructure over an 11-year tenure.
• Delivered model risk governance for a Basel II Risk-Weighted Assets logistic regression model — coordinated IT UAT, data validation, and regulatory sign-off — establishing a model documentation and validation discipline later extended to AI/ML model reviews.
• Applied model risk validation methods to an AI-enabled Integrated Risk Management System (IRMS) and Early Warning Signals (EWS) module — reviewing model logic and data inputs to strengthen enterprise-wide risk detection.
• Developed and implemented information security policies, risk frameworks, and compliance programs aligned with RBI advisories.
• Established a Cyber Crisis Management Framework, including severity classification, RACI, and escalation mechanisms.
• Strengthened vendor and outsourcing risk management across the full lifecycle; supported SIEM rollout, improving detection and response maturity.

IT Officer at Erstwhile Dena Bank (2007-03 – 2009-12)

• Supported Internet Banking and ATM operations, including security controls and early digital adoption initiatives.

Master's in Computer Applications in Computer Applications

PG Diploma in E-Commerce and Internet Applications

Bachelor of Commerce in Commerce