Job Description :

- Define and operate the Bank's data security governance framework across data discovery, classification, protection, monitoring, retention and secure disposal.

- Align data security architecture and controls with RBI expectations, PCI DSS requirements and DPDPA obligations.

- Lead the implementation and lifecycle governance of DLP, Database Activity Monitoring, encryption, HSM, tokenisation, masking and data-discovery solutions.

- Develop the annual data security roadmap, control-maturity plan and risk-based remediation priorities.

- Maintain data classification standards, sensitive-data inventories, data-flow registers and regulatory control mappings.

- Govern DLP policies, alerts, exceptions, user violations and corrective-action tracking.

- Monitor privileged and abnormal database access through DAM and other security controls.

- Drive encryption, key management, certificate lifecycle, HSM and data-masking governance.

- Monitor PCI DSS controls applicable to cardholder data storage, processing, transmission, logging and access.

- Support privacy-by-design reviews, data minimisation and secure disposal practices.

- Coordinate incident response for data leakage, unauthorised access, privacy breaches and database compromise.

- Support RBI inspections, internal audits, PCI DSS assessments, information security audits and privacy reviews.

- Maintain dashboards and KRIs/KPIs for data leakage, access anomalies, encryption coverage and overdue audit actions.

- Evaluate automation opportunities for data discovery, DLP tuning, database monitoring and evidence collection.

- Coordinate with vendors, OEMs, system integrators and external assessors to strengthen data protection controls.

Desired Candidate Profile :

- BE, B.Tech, B.Sc, BCA, MCA, M.Sc IT, Cyber Security or an equivalent qualification.

- Postgraduate qualification in Information Security, Data Protection, Risk Management or Privacy is preferred.

- 6 - 8 years of relevant experience in information security, data security, privacy, database security, PCI DSS, DLP, encryption, key management or technology risk.

- Prior experience in the BFSI sector would be preferred.

- Strong knowledge of DLP, DAM, data discovery, data classification, encryption, HSM, tokenisation and data masking.

- Practical understanding of PCI DSS, DPDPA, RBI IT governance and privacy-by-design requirements.

- Experience supporting audits, regulatory reviews and data-security investigations.

- Strong analytical, regulatory-interpretation and stakeholder-management capabilities.

- Excellent documentation, written communication and escalation-management skills.

- Preferred certifications include CISSP, CISM, CISA, CDPSE, CIPM/CIPP, CRISC, ISO 27001 Lead Auditor/Implementer, PCI DSS-related certification or cloud security certification.