Company Overview :

Pocketly is a leading fintech platform dedicated to providing instant credit solutions to college students and young professionals. By leveraging advanced data analytics and a seamless digital interface, the company simplifies access to short-term liquidity, fostering financial inclusion for the youth demographic. Operating in the high-growth digital lending space, Pocketly manages a significant volume of sensitive financial data, necessitating a robust and sophisticated security infrastructure to maintain user trust and regulatory compliance.

Role Overview :

As a Cyber Security professional at Pocketly, you will be responsible for safeguarding the company's digital assets and ensuring the integrity of our lending platform. You will work closely with the engineering, product, and leadership teams to integrate security protocols into the development lifecycle and manage the company's overall risk posture. Your daily efforts will directly impact the security of our user base, ensuring that our financial services remain resilient against evolving threats while meeting stringent regulatory requirements in the fintech sector.

Key Responsibilities :

- Design and implement comprehensive security frameworks to protect sensitive financial data and infrastructure from unauthorized access or breaches.

- Conduct regular IT compliance audits to ensure the organization adheres to industry standards, data protection laws, and internal security policies.

- Manage enterprise risk by identifying potential vulnerabilities in the platform and executing mitigation strategies to minimize business impact.

- Collaborate with the Chief Information Security Officer to define and execute the long-term security roadmap and incident response procedures.

- Monitor security systems and network traffic to proactively detect and neutralize threats before they affect system availability or data privacy.

- Provide technical guidance to cross-functional teams regarding secure coding practices and the deployment of secure cloud-based architectures.

Required Skillset :

- Demonstrated expertise in managing end-to-end cyber security operations, including threat hunting, vulnerability assessment, and penetration testing.

- Strong proficiency in IT compliance frameworks such as ISO 27001, PCI-DSS, or SOC2, with a proven ability to translate regulatory requirements into actionable technical controls.

- Ability to perform quantitative and qualitative risk assessments to support data-driven decision-making for senior management.

- Excellent communication skills to effectively articulate complex security risks and mitigation strategies to non-technical stakeholders and leadership.

- A minimum of 3 - 4 years of hands-on experience in a security-focused role, preferably within the fintech or high-growth startup ecosystem.

- Adaptability to work in a fast-paced, hybrid environment in Bangalore, requiring a proactive approach to problem-solving and continuous learning.

- A Bachelor's degree in Computer Science, Information Technology, or a related field, complemented by relevant professional certifications.