Manager – Data Security

• Define and operate the Bank’s data security governance framework across data discovery, classification, protection, monitoring, retention and secure disposal.
• Align data security architecture and controls with RBI expectations, PCI DSS requirements and DPDPA obligations.
• Lead the implementation and lifecycle governance of DLP, Database Activity Monitoring, encryption, HSM, tokenisation, masking and data-discovery solutions.
• Develop the annual data security roadmap, control-maturity plan and risk-based remediation priorities.
• Maintain data classification standards, sensitive-data inventories, data-flow registers and regulatory control mappings.
• Govern DLP policies, alerts, exceptions, user violations and corrective-action tracking.
• Monitor privileged and abnormal database access through DAM and other security controls.
• Drive encryption, key management, certificate lifecycle, HSM and data-masking governance.
• Monitor PCI DSS controls applicable to cardholder data storage, processing, transmission, logging and access.
• Support privacy-by-design reviews, data minimisation and secure disposal practices.
• Coordinate incident response for data leakage, unauthorised access, privacy breaches and database compromise.
• Support RBI inspections, internal audits, PCI DSS assessments, information security audits and privacy reviews.
• Maintain dashboards and KRIs/KPIs for data leakage, access anomalies, encryption coverage and overdue audit actions.
• Evaluate automation opportunities for data discovery, DLP tuning, database monitoring and evidence collection.
• Coordinate with vendors, OEMs, system integrators and external assessors to strengthen data protection controls.

Desired Candidate Profile

• BE, B.Tech., B.Sc., BCA, MCA, M.Sc. IT, Cyber Security or an equivalent qualification.
• Postgraduate qualification in Information Security, Data Protection, Risk Management or Privacy is preferred.
• 6–8 years of relevant experience in information security, data security, privacy, database security, PCI DSS, DLP, encryption, key management or technology risk.
• Prior experience in the BFSI sector would be preferred.
• Strong knowledge of DLP, DAM, data discovery, data classification, encryption, HSM, tokenisation and data masking.
• Practical understanding of PCI DSS, DPDPA, RBI IT governance and privacy-by-design requirements.
• Experience supporting audits, regulatory reviews and data-security investigations.
• Strong analytical, regulatory-interpretation and stakeholder-management capabilities.
• Excellent documentation, written communication and escalation-management skills.
• Preferred certifications include CISSP, CISM, CISA, CDPSE, CIPM/CIPP, CRISC, ISO 27001 Lead Auditor/Implementer, PCI DSS-related certification or cloud security certification.