Work Location : Andheri (W) - Veera Desai Road (Supreme Chambers) Nearest Metro Railway Station: Azad Nagar.

Job Title : Senior Manager, Information Security - GRC

Responsibilities :

- Maintain, implement and periodically review the organization`s Information Security policies, standards, procedures and guidelines to ensure alignment with applicable regulatory requirements, PCI DSS, ISO 27001, CERT-In, DPDP and industry best practices.

- Assist the CISO in developing and enhancing the organization`s Information Security governance framework, policies, standards and security processes based on evolving regulatory requirements, emerging cyber threats and business needs.

- Work closely with Product, Engineering, Application Development, Infrastructure, Cloud and Operations teams to ensure security controls are embedded into technology platforms, applications and operational processes.

- Review the security architecture of new products, applications, infrastructure and technology initiatives and recommend appropriate security controls based on security-by-design principles.

- Conduct periodic management reviews of critical security controls including Firewall Rules, Web Application Firewall (WAF), Identity & Access Management (IAM), User Access Management, Privileged Access Management (PAM), Network Security, Endpoint Security and other information security controls, and ensure timely remediation of identified gaps.

- Conduct technical security assessments of applications, infrastructure and enterprise security controls, identify areas of improvement and drive implementation of corrective actions.

- Develop, implement and periodically review Information Security aspects of Business Continuity and Cyber Resilience plans to ensure resilience of critical business services.

- Lead and coordinate enterprise Information Security initiatives and projects including Data Loss Prevention (DLP), Security Information and Event Management (SIEM), Vulnerability Assessment & Penetration Testing (VAPT), Identity & Access Management (IAM), DPDP compliance, Security Automation, Cybersecurity AI and other strategic security programs.

- Engage and coordinate with external consultants, technology partners and service providers for implementation of information security solutions and ensure successful delivery of security projects.

- Review security exceptions, risk acceptance requests and compensating controls, ensuring appropriate approvals, documentation and mitigation measures are in place.

- Support internal and external audits by implementing remediation actions, coordinating closure of observations and strengthening security controls across the organization.

- Develop security dashboards, governance reports, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs) and management reports for the CISO and senior leadership.

- Promote security awareness, secure development practices and a strong security culture across the organization.

Experience :

- 6 to 10 years of hands-on experience in Information Security Governance, Information Security Management, Security Architecture or Cyber Security within Banks, Financial Institutions, Payment Aggregators, FinTech organizations or Information Security Consulting firms.

- Experience implementing Information Security programs aligned with RBI regulations, PCI DSS, ISO 27001, CERT-In directions and DPDP requirements.

- Experience working with Product Engineering, Infrastructure and Cloud teams to implement security controls across enterprise environments.

- Experience implementing enterprise security technologies such as DLP, SIEM, IAM/PAM, Vulnerability Management, Security Monitoring, Endpoint Security, Network Security and Cloud Security solutions.

- Experience managing cross-functional security initiatives and coordinating implementation across multiple technology teams.

Skills :

- Information Security Governance

- Information Security Policy & Standards Management

- Security Architecture and Secure Design Review

- Identity & Access Management

- Network Security and Infrastructure Security

- Information Security Risk Assessment

- Security Control Reviews

- Regulatory Security Requirements (RBI, PCI DSS, ISO 27001, CERT-In, DPDP)

- Business Continuity and Cyber Resilience

- Security Metrics, Governance Reporting and Executive Communication

- Strong stakeholder management and cross-functional collaboration skills

Qualifications : Bachelor's Degree in Information Security/ Computer Science; Certified Information Systems Auditor (CISA); Certified Information Security Manager (CISM); PCI DSS/ ISO 27001 - Lead Auditor or Implementer