IT Security Manager

Job Responsibilities:

• Lead security operations across paydibs’ cloud environments, payment gateway, merchant portal, APIs, terminal ecosystem and supporting tools.
• Manage security monitoring, alert triage, investigation and incident response using SIEM, WAF, endpoint security, cloud security controls and application/API logs.
• Own vulnerability management: asset visibility, scanning, risk-based prioritisation, remediation tracking, patch compliance and verification of closure.
• Strengthen identity and access management, including MFA, RBAC, privileged-access control, periodic access reviews, joiner/mover/leaver processes and production-access governance.
• Partner with DevSecOps and Engineering to embed secure SDLC practices: code and dependency scanning, secrets management, CI/CD security gates, container/cloud configuration security and penetration-test remediation.
• Review and ensure adherence of SAST and DAST results to governance requirments
• Secure payment data flows and cryptographic services, including tokenisation, HSM/key-management controls, TLS, API authentication, webhook integrity, transaction logging and audit trails.
• Maintain and test incident-response playbooks for security events, payment disruption, account compromise, fraud/abuse, data exposure and third-party incidents.
• Support PCI DSS assessments and continuous compliance activities, ensuring control evidence is accurate and operationally effective.
• Conduct security assessments of critical vendors, cloud services, payment partners and outsourced support providers; validate security requirements before integration or material change.
• Contribute to DR, resilience and recovery exercises for critical payment, authentication, settlement and reconciliation services.
• Deliver practical security awareness for developers, operations teams and business users, with targeted training based on real risks and incidents.
• Provide clear security metrics, vulnerability status, material incidents and remediation updates to the CISO and CTO.
• Operate with a high degree of ownership and autonomy: proactively identify security gaps, emerging threats, control weaknesses and compliance risks; define clear, practical requirements and remediation options; and drive the right stakeholders to timely implementation without waiting for issues to be escalated or assigned.

Job Requirements:

• Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.
• 5–8 years of experience in information security, security operations, or cybersecurity, preferably in fintech or payments.
• Strong knowledge of SIEM, WAF, endpoint security, cloud security, vulnerability management, and incident response.
• Hands-on experience with IAM, MFA, privileged access, SAST, DAST, and secure SDLC practices.
• Understanding of PCI DSS, payment security, cryptography, API security, and key management.
• Experience with penetration testing, remediation tracking, vendor security assessments, and disaster recovery.
• Strong analytical, troubleshooting, and cross-functional collaboration skills.
• Proactive, self-driven, and able to independently identify security risks and drive remediation.
• Relevant certifications such as CISSP, CISM, CEH, Security+, or GIAC are an advantage.