Manager - Information Security

Role & responsibilities

• Lead compliance with RBI PSS, Cyber Resilience/DPSC, C-SITE, PCI DSS and ISO/IEC 27001.
• Coordinate internal, external and regulatory audits and ensure closure of observations.
• Develop and maintain information security & information technology policies, standards, SOPs documentation.
• Manage IVA, IPT, EPT, App PT, FRR, ASV scans, and remediation tracking.
• Initiating periodic activities required under regulatory norms and monitoring them until completion
• Coordinate security incident response, RCA and corrective actions.
• Monitor risk-related advisories and ensure necessary actions are taken by internal stakeholders.
• Collaborate with IT, business teams, auditors and vendors.
• Coordinate internal stakeholders for Disaster Recovery Drill and Business Continuity Plan activity.
• User Access Review of difference applications.
• Ensuring compliance of the new application during onboarding

Key Performance Indicators

• Regulatory compliance status
• Timely audit completion
• Audit observation closure within SLA
• Policy review completion
• Critical vulnerability remediation within SLA
• Risk assessment completion
• Incident response SLA adherence
• Security reporting accuracy

Technical Skills

• PCI DSS
• RBI PSS
• Cyber Resilience/DPSC
• ISO 27001
• RBI Cyber Security Guidelines
• Risk Assessment
• Vulnerability Management
• Incident Response
• BCP/DR
• Patch Management
• User Access Reviews
• Firewall Ruleset Reviews

Soft Skills

• Leadership
• Communication
• Stakeholder Management
• Analytical Thinking
• Documentation
• Problem Solving