The CFO-CRO-CTO Trinity: Building India's Next Generation of Financial Services Leaders

There was a time — not very long ago — when the CFO, CRO, and CTO of a large Indian bank operated in clearly defined, largely non-overlapping domains. The CFO managed the balance sheet, fund transfer pricing, and investor relations. The CRO owned credit, market, and operational risk frameworks. The CTO managed core banking systems, ATM networks, and the IT infrastructure that supported everything else. Each was excellent within their domain.

That world no longer exists. The decisions that define a bank's performance in 2025 — whether to build or partner for AI-driven credit scoring, how to price climate risk into a large infrastructure loan, whether to adopt cloud infrastructure for core banking — cannot be made well by any single domain perspective. They sit at the intersection of financial economics, risk management, and technology architecture simultaneously.

At Gladwin International, we have conducted hundreds of BFSI executive searches and leadership assessments across India's banking, insurance, wealth management, and fintech sectors. The convergence of the CFO, CRO, and CTO role mandates is the single most consistent pattern we observe in the highest-performing institutions — and the single most common capability gap we identify in institutions that are struggling to keep pace.

The Data-First CFO: Finance Leadership Reimagined

The Indian CFO's mandate has expanded dramatically. The traditional CFO function — statutory reporting, treasury management, investor relations, capital planning — remains essential. But the most consequential aspects of the modern CFO role in financial services are data-driven: measuring risk-adjusted returns at granular portfolio levels, modelling the P&L implications of regulatory changes in real time, and building the financial architecture for new business models including digital lending, platform banking, and insurance distribution.

The transition to Expected Credit Loss (ECL) accounting under Ind AS 109 — which Indian banks have been progressively implementing — illustrates why data capability matters. ECL requires banks to model expected losses over the lifetime of financial instruments using statistical models of default probability, loss given default, and exposure at default. The CFO who cannot engage with the assumptions, sensitivities, and governance of these models is signing off on numbers they do not understand. In our assessment work, we find this level of engagement in fewer than 40% of CFOs at large Indian financial institutions.

"The CFO who treats data science as a separate function that produces numbers for the finance team to sign off on has fundamentally misunderstood the new compact between finance and analytics. They are the same function now."

The Technology-Fluent CRO: Risk Management in the Age of Algorithms

The Chief Risk Officer's mandate has been transformed by AI as profoundly as any function in financial services. Credit risk assessment, market risk measurement, fraud detection, model risk management, cyber risk, and climate risk are all deeply technology-mediated — and understanding the technology is no longer optional for the CRO. It is the job.

Indian banks with significant AI deployment are managing dozens or hundreds of production AI models simultaneously. Each model has assumptions that must be validated, performance that must be monitored, and potential biases that must be assessed. The CRO who delegates all model risk oversight to a model risk team without genuinely understanding what is being overseen is creating an accountability gap that regulators will eventually find.

RBI Deputy Governor M. Rajeshwar Rao has spoken publicly about the risks of AI in lending decisions — including algorithmic bias, model opacity, and systemic correlation risk when multiple institutions use similar AI models. The CRO who understands these risks at a technical level is in a fundamentally different regulatory dialogue than one who relies on second-hand briefings.

Cyber risk has become, in the view of both RBI and SEBI, a systemic financial stability concern. The RBI's Cybersecurity Framework for Banks (2016, updated multiple times) and its circular on IT governance have raised the bar for board-level oversight of cyber risk. CROs who have invested in genuine cyber risk expertise are better positioned to provide the governance that regulators now expect.

The Regulation-Savvy CTO: Technology Leadership Under Regulatory Scrutiny

Technology leaders in Indian financial services operate under a more demanding regulatory framework than CTOs in virtually any other sector. The RBI's Master Directions on IT Governance, Risk, Controls and Assurance Practices (2023) impose detailed requirements for IT governance structures, change management processes, data backup and recovery, and cloud computing frameworks. SEBI's cybersecurity frameworks for market infrastructure institutions and stock brokers impose parallel requirements.

The CTO of a large Indian bank is not, in any meaningful sense, running a 'normal' technology organisation. Every major technology decision — cloud migration, core banking system upgrade, introduction of AI into customer-facing processes — must navigate regulatory approval processes and data localisation requirements (RBI's stance on cloud computing requires financial data to remain in India). CTOs who have built regulatory fluency — typically through careers that combined technology leadership with periods in compliance, risk, or regulatory affairs — are extraordinarily valuable.

Navigating RBI and SEBI: Regulation as Strategic Intelligence

For all three roles — CFO, CRO, CTO — the ability to engage with RBI and SEBI regulation as strategic intelligence, rather than compliance overhead, is a differentiating capability. India's financial regulators are more proactively communicative about their thinking than many market participants realise. The RBI's Annual Report, Governor's monetary policy statements, Deputy Governor speeches, and discussion papers are rich with forward guidance on regulatory direction. SEBI's consultation papers provide months of lead time before formal regulation.

The leaders who systematically read and interpret these outputs — who attend RBI-convened industry consultations, who build personal relationships with RBI and SEBI officials at appropriate seniority levels — operate with a strategic intelligence advantage that is concrete and measurable. Regulatory surprises are rare for institutions whose leaders are embedded in the regulatory dialogue.

ESG Integration: From Disclosure Compliance to Financial Strategy

Environmental, Social, and Governance (ESG) considerations have moved from the periphery of BFSI leadership to its centre, driven by SEBI's BRSR mandate, RBI's climate risk framework, and the preferences of global institutional investors who own significant stakes in India's large listed financial institutions.

Green financing — issuing green bonds, structuring sustainability-linked loans, financing renewable energy infrastructure — is growing rapidly in India. HDFC Bank issued India's first green bond from a private sector bank in 2021. SBI has issued multiple green bonds in international markets. The CFOs and business leaders who understand how to structure green finance products, navigate the International Capital Market Association's Green Bond Principles, and report on use-of-proceeds credibly are accessing a rapidly growing capital pool. This is not idealism. It is financial strategy.

Talent from Global Banks Coming Home

One of the most significant talent dynamics in Indian BFSI over the last five years has been the return of Indian-origin financial services executives from global banking centres. The combination of India's economic trajectory, the COVID-era reassessment of geography's importance, and the competitive compensation offered by India's top private sector banks and fintechs has prompted a meaningful reverse migration.

These returning executives — who have built careers at Goldman Sachs, JPMorgan, HSBC, Standard Chartered, and Barclays in London, New York, Hong Kong, and Singapore — bring capabilities in quantitative risk management, structured finance, technology architecture, and global regulatory compliance that are otherwise rare in India's domestic talent pool. At Gladwin International, a growing proportion of our BFSI placements over the last three years have been returning diaspora executives.

What This Means for Leaders and Boards

The CFO-CRO-CTO convergence is not a passing trend. It is the structural response to a financial services environment where every major decision sits at the intersection of financial economics, risk management, and technology. The institutions that have already invested in leaders who can operate across these boundaries are visibly outperforming those that have not.

For individual leaders: the investment in cross-functional literacy is the most valuable career development decision you can make in Indian BFSI right now. For boards: the framework we use at Gladwin International to evaluate BFSI C-suite candidates explicitly assesses cross-domain fluency alongside functional excellence. The combination is rare, it is valuable, and it is identifiable — if you know what to look for.