SBI IT Risk 2026 - 4 Senior Roles Where 9-12 Years of IT Experience Matters More Than the Degree

The degree list in SBI's IT Risk notification is broad enough to attract many technology professionals: BE/BTech routes and MCA/MSc/MTech routes across computer science, IT, cybersecurity and related fields are accepted with the stated marks. But academic eligibility is not where most candidates will be filtered. DVP asks for roughly twelve years in IT, with significant IT-risk/information-security depth; AVP still asks for about nine years, with around five years in the risk/security space.

That makes the four vacancies a senior-control-function recruitment rather than a generic cybersecurity drive. Preferred certifications such as CISSP, CRISC, CISM or CISA can strengthen a profile because they map directly to governance and risk work, but they do not replace the experience requirement.

There are two DVP and two AVP vacancies, all vertically UR, with horizontal PwBD locomotor-disability backlog provisions stated separately. The official age bands are 36–45 for DVP and 32–42 for AVP. SBI also says a candidate cannot apply for both positions, so applicants should choose based on actual seniority and risk ownership rather than filing duplicate applications 'to be safe'.

CTC ceilings are ₹60 lakh for DVP and ₹50 lakh for AVP. SBI's contract package uses a fixed/variable structure, so these are negotiated total package ceilings rather than guaranteed fixed cash. Both roles are associated with Mumbai/Navi Mumbai and are contractual for the advertised period, with extension linked to review rather than automatic permanence.

Selection is shortlist → 100-mark interview → CTC negotiation. There is no mass written examination in the selection path. A strong candidate therefore needs to evidence actual IT-risk ownership—control frameworks, security governance, regulatory/audit remediation, technology-risk assessment and stakeholder influence—rather than only list technical tools. Applications close 6 October 2026.