Key Requirements :

- Strong expertise in Information Security Governance, including deep knowledge of security frameworks, standards, policies, and best practices.

- Proven understanding of IT infrastructure, application architectures, and enterprise technology environments.

- Hands on experience in Data Privacy and Regulatory Compliance, including practical understanding of DPDPA, data protection controls, privacy impact assessments, and privacy by design principles.

- Exposure to DPO related responsibilities is an advantage.

- Proficiency in IT Governance, Risk and Compliance (ITGRC), with strong capabilities in IT risk management, technology risk assessment, control design, policy drafting, and continuous controls monitoring.

- Strong understanding of the cyber threat landscape, including cyber threat intelligence lifecycle, analysis frameworks, and familiarity with threat actors and their TTPs particularly within the Indian BFSI/NBFC ecosystem.

- Experience in regulatory engagement, with proven ability to interact with regulators and external auditors on information security, privacy, IT audit, and compliance matters.

- Professional certifications such as CISA, ISO 27001 Lead Auditor, or equivalent credentials in IT Audit, IT Risk Management, or Information Security are highly desirable.

- Strong partner orientation, with the ability to collaborate effectively with board members, business leaders, clients, and internal teams while balancing security risks and business priorities.

- Ability to articulate a clear security and privacy strategy.

- High level of risk awareness, with a proactive approach to identifying emerging technological and cyber risks, and the confidence to make informed decisions with clarity and conviction.

- Strong alignment with Vistaar Financial Services values and commitment to maintaining ethical standards, trust, and organizational integrity.

- Good understanding of NBFC and BFSI business models, ensuring that information security, data privacy, and technology risk practices are effectively aligned with business objectives and regulatory requirements.