MyMoneyKarma - Head of Digital Security

Position Title : Head - Digital Security

Department : Information Technology / Information Security

Reports To : Chief Technology Officer / Chief Information Security Officer

Location : Hyderabad

Experience Level : 8 to 10 years in Information Security / Cybersecurity

Position Overview :

We are seeking an experienced Digital Security Head to lead our cybersecurity strategy and operations for our fast-growing fintech organization. This role is critical to safeguarding our digital assets, customer data, and financial infrastructure against evolving cyber threats while ensuring compliance with Indian regulatory frameworks, including RBI guidelines, the IT Act, the DPDP Act, and industry standards.

The ideal candidate will have deep expertise in fintech, cloud, and application security, with a proven track record of building and scaling security programs in high-growth technology environments.

Key Responsibilities :

Strategic Leadership :

- Continuously improve, develop and execute a comprehensive cybersecurity strategy aligned with business objectives and regulatory requirements

- Lead digital security roadmap, security architecture, and risk management frameworks

- Manage high-performing security teams, including SOC, application security, infrastructure security, and GRC functions

- Partner with executive leadership to communicate security posture, risks, and investment requirements

- Drive security culture across the organization through awareness programs and training initiatives

Security Operations & Incident Management :

- Operate a 24x7 Security Operations Center (SOC) with advanced threat detection and response capabilities

- Improve SIEM, SOAR, EDR, and threat intelligence platforms for proactive threat hunting

- Improve and test incident response plans, disaster recovery, and business continuity procedures

- Lead forensic investigations and root cause analysis for security incidents

- Manage vulnerability management program, including regular penetration testing and security assessments

Application & Infrastructure Security :

- Integrate security into the DevSecOps pipeline with automated security testing (SAST, DAST, SCA)

- Secure cloud infrastructure across AWS and other cloud environments

- Enforce API security, mobile app security, and secure coding practices

- Monitor, improve, design and deploy zero-trust architecture, micro-segmentation, and network security controls

- Oversee encryption strategies, key management, and data protection mechanisms

Compliance & Risk Management :

- Ensure compliance with RBI guidelines (including Master Directions on Digital Payment Security Controls), PCI-DSS, ISO 27001, and CERT-In directives

- Implement the Data Protection and Privacy Act (DPDP) requirements and maintain a data governance framework

- Conduct regular security audits, risk assessments, and compliance reviews

- Manage third-party security assessments, vendor risk management, and security due diligence

- Coordinate with regulatory authorities and manage security incident reporting obligations

Fraud Prevention & Financial Security :

- Implement fraud detection and prevention systems using ML-based anomaly detection

- Secure payment gateways, UPI systems, IMPS, NEFT, and other digital payment channels

- Deploy transaction monitoring, anti-money laundering (AML) controls, and KYC security measures

- Collaborate with the fraud operations team to investigate and mitigate financial crimes

Required Qualifications :

Education :

- Bachelors or Masters degree in Computer Science, Information Security, or related technical field

- Relevant security certifications such as CISSP, CISM, CISA, CEH, or equivalent

Experience :

- 8 to 10 years of progressive experience in information security and cybersecurity roles

- Minimum 3 years in managing external audits / relevant leadership roles

- Good knowledge of fintech, banking, payments, or financial services security

- Experience with the Indian regulatory landscape, including RBI, CERT-In, and DPDP compliance

- Hands-on experience securing cloud-native applications and microservices architectures

Technical Skills :

- Deep expertise in security technologies : SIEM, IDS/IPS, DLP, WAF, firewalls, endpoint security

- Strong knowledge of cloud security (AWS, Azure, GCP), container security (Docker, Kubernetes)

- Proficiency in application security testing tools and secure software development lifecycle

- Understanding of cryptography, PKI, identity and access management (IAM), and authentication mechanisms

- Familiarity with security frameworks : NIST CSF, CIS Controls, OWASP Top 10, SANS Top 25

- Experience with scripting languages (Python, PowerShell) for security automation

- Knowledge of payment security standards (PCI-DSS, PA-DSS) and tokenization techniques

Leadership Competencies :

- Strong executive presence and ability to communicate complex security concepts to non-technical stakeholders

- Proven ability to build, mentor, and scale high-performing security teams

- Strategic thinking with the ability to balance security requirements with business velocity

- Crisis management experience handling security incidents and breaches

- Strong vendor management and negotiation skills

Preferred Qualifications :

- Additional certifications : OSCP, GIAC, CCSP, AWS Certified Security Specialty

- Experience with security in digital lending, wealth management, or insurance platforms

- Background in building SOC from scratch or scaling security operations

- Published research, conference presentations, or contributions to the security community

- Experience working with global teams and managing offshore security operations

What We Offer :

- Opportunity to manage and lead a security function at a high-growth fintech company

- Work with cutting-edge security technologies and modern cloud infrastructure

- Collaborative culture with direct access to founders and the leadership team

- Impact millions of users by securing Indias digital financial ecosystem