TL;DR
A regulated Indian fintech must appoint three control functions by law: a Chief Risk Officer above ₹5,000 crore in NBFC assets, a Chief Compliance Officer in the Upper and Middle Layers, and a Chief Information Security Officer under the 2026 cybersecurity directions. Around those sit roughly nineteen senior commercial, technology and product seats, each with its own hiring guide below.
An Indian fintech's leadership team is shaped by three forces at once: what the business needs commercially, what the technology requires, and what the regulator obliges it to appoint. The third is the one most hiring plans underestimate, because unlike the other two it comes with deadlines, prescribed reporting lines and prohibitions on combining roles.
This map organises the senior roles accordingly: the appointments the RBI and SEBI mandate, the commercial leadership that runs the business lines, the engineering and product leadership that builds the systems, and the specialist individual contributor seats where the real scarcity sits.
Key points
- If you are approaching a regulatory threshold, start with the mandated appointments. They have the longest lead times and the fewest available candidates.
- If you are writing a brief, read the guide for the role and the guide for the system it owns. Briefs assembled from titles alone produce shortlists nobody wants to interview.
- If you are sequencing several hires, the order matters more than any single search. Three mandated roles started simultaneously usually fill one.
- If you are budgeting rather than briefing, FinTech salaries in India 2027 carries modelled pay bands for most of the roles below, with the specialist premiums that sit on top of them.
The mandated appointments
These are not governance preferences. Each is required by a regulator at a defined trigger, with conditions that directly constrain who can be hired.
- Chief Risk OfficerRequired for NBFCs above ₹5,000 crore in assets. Board-approved fixed tenure, no dual-hatting, removal reported to the RBI.
- Chief Compliance Officer or MLRORequired for NBFC Upper and Middle Layers. Three-year minimum tenure, two levels from the CEO, no conflicting responsibilities.
- Chief Information Security OfficerRequired under the NBFC Cybersecurity and Technology Risk Directions, 2026. Reports to the executive overseeing risk, not to the Head of IT.
A fintech crossing into regulated scale typically needs all three inside the same eighteen months, from three entirely separate candidate pools. Running the searches in parallel is the most common reason companies fill one of the three and miss the deadline on the others.
Commercial leadership
The roles that own revenue, business lines and the partnerships the business runs on.
- Head of PaymentsThree different jobs share this title. Success rates and cost per transaction, or a merchant P&L, or a bank product seat.
- Head of UPI BusinessA volume role that became a revenue role when MDR returned to UPI on 15 October 2026.
- Head of BusinessA P&L inside a regulated perimeter, where several of the usual growth levers are bolted down.
- FinTech CFODebt capital, asset-liability management and regulatory capital. A different hire from a technology CFO.
- FinTech CMOGrowth where every claim is a regulated statement and the finfluencer channel has closed.
- VP of Banking AlliancesSponsor banks, BIN sponsorship and co-lending after the 2025 Directions reset the framework.
- Head of FinOps and SettlementsSettlement, reconciliation and breaks. The most reliably under-hired senior function in Indian fintech.
- Head of Lending and credit policyOwning growth and credit quality at once, and where credit policy should actually sit.
WealthTech and broking
The capital markets side of fintech sits under SEBI rather than the RBI, with its own mandated appointments and a revenue structure reshaped more often by regulation than by competition.
- Head of Wealth businessFour different business models share the title. Which licence you hold decides which job it is.
- Head of BrokingRunning a business where the headline product is free and regulation moves the P&L.
- Head of Risk and RMSReal-time margin, square-off policy and the sessions the function is actually judged on.
- SEBI Compliance Officer or Principal OfficerA named, personally liable appointment, which changes who will take the job.
Technology and product leadership
- FinTech CTOWhat separates a CTO who has built under regulatory supervision from one who has built fast.
- Head of Platform or VP EngineeringMaking a regulated engineering organisation ship reliably, which is not the same as shipping fast.
- Principal payments architectThe senior individual contributor who owns how money moves, and is accountable when it moves wrongly.
- Head of Data Science and AIAccountability for decisions a model makes without you, which is a different job from building models.
- Product leadership for a regulated fintechProduct management where part of the specification is written by someone outside the company.
If you are staffing an engineering organisation rather than filling a single seat, build, buy or borrow sets out which capabilities to own and in what order.
Start from the system, not the title
The most useful thing we can offer a company writing a fintech brief is this: describe the system the role owns before describing the person. A "backend engineer" at a payments company and one at a lending platform are solving different problems with different failure modes. A risk leader for a digital lending book is not a bank credit veteran with a new title.
Our FinTech systems section exists for exactly this. Each guide explains one piece of financial infrastructure properly, then answers the hiring question that follows.
| If the role owns | Read |
|---|---|
| Payment flows and rails | How UPI payments work |
| The system of record for money | Ledger architecture |
| Proving the numbers against external parties | Reconciliation and breaks |
| Credit decisions and the lending stack | Lending decision infrastructure |
| Inline fraud and transaction risk | Real-time fraud and risk decisioning |
| Onboarding, screening and monitoring | KYC, AML and compliance engineering |
| Architecture under the rulebook | Regulated engineering |
Sequencing: the part most plans get wrong
Three observations from running these searches.
Mandated roles have the longest lead times and the thinnest pools. A Chief Risk Officer search involves board approval, a fixed tenure negotiation and a candidate conducting their own diligence on governance. It is not a sixty-day process. Companies that start after crossing the threshold put a regulatory clock on a search that cannot be compressed without compromising it.
Non-overlapping pools cannot be run in parallel with one recruiter's attention. Credit risk, regulatory compliance and information security are three distinct professions. Running three searches at once is three searches, not one with three outputs.
The specialist individual contributor layer is where searches actually stall. Leadership is findable at a price. The senior engineer who has personally run a ledger, a recon engine, a decision engine or an inline fraud service at volume is the scarce resource in Indian fintech, and that scarcity is the reason an otherwise well-funded roadmap slips.
If you are planning a build rather than filling a seat, how we search sets out how we approach it.
Common questions
Which fintech leadership roles are legally required in India?
For NBFCs, a Chief Risk Officer above ₹5,000 crore in assets under the RBI's NBFC Governance Directions, 2025, a Chief Compliance Officer for Upper and Middle Layer entities under the RBI's April 2022 circular on the compliance function, and a Chief Information Security Officer for every NBFC under the NBFC Cybersecurity and Technology Risk Directions, 2026, with the obligations varying by layer and asset size. Brokers and investment advisers have equivalent obligations under SEBI. Each comes with conditions on reporting line, tenure and dual-hatting that constrain who can be appointed.
In what order should a fintech hire its leadership team?
Mandated appointments first, because they have deadlines and the smallest candidate pools, and ideally before the regulatory threshold is crossed rather than after. Commercial and technology leadership follow the business model: a lender needs credit and risk depth early, a payments business needs partnership and operations depth early. The specialist individual contributor layer should be hired alongside leadership rather than after it, because that is where delivery actually stalls.
What makes fintech hiring different from general technology hiring?
Three things, all of which are visible at the system level rather than on a CV: correctness is not negotiable, because a bug in a ledger or a settlement pipeline is money that has moved; the regulator is a stakeholder in architecture decisions, not only in policy; and the scale is uneven, with Indian payment volumes among the highest anywhere and arriving in sharp peaks. Candidates who have worked under those constraints build differently, and the difference does not appear in a list of technologies.
Can we hire fintech leaders from outside financial services?
Often yes, and frequently to the organisation's benefit, provided the adjustment is planned rather than assumed away. The specific gap is accepting that a technically superior design may not be permitted, and that the constraint comes from outside the company. Candidates who become curious about the rulebook adapt quickly. Those who treat it as friction make decisions that have to be unwound. For the mandated appointments specifically, regulated experience is usually not substitutable, because the eligibility conditions and the supervisory relationship are the job.
How long do fintech leadership searches take in India?
Commercial and technology leadership typically runs eight to fourteen weeks from brief to offer. Mandated appointments run longer, frequently four to six months, because the pool is small and passive, board approval is involved, and serious candidates conduct diligence on governance before engaging. Searches for scarce specialist individual contributors vary most widely, because the constraint is the size of the pool rather than the speed of the process.