About The Role
We are hiring an experienced IT Security Lead to lead our enterprise-wide security initiatives in the Banking & Financial Services domain. You will be responsible for defining and enforcing security standards across applications, infrastructure, data, and user environments, ensuring compliance with RBI and other regulatory requirements.
This is a strategic and hands-on role suited for a security leader who understands the unique challenges of financial systems and enterprise-grade IT infrastructure.
Key Responsibilities
- Define and implement enterprise-level security policies, frameworks, and controls aligned with RBI guidelines, ISO 27001, and other BFSI regulations.
- Lead end-to-end security operations : vulnerability management, threat detection, incident response, and security monitoring.
- Work closely with Compliance, DevOps, Cloud, and Infrastructure teams to embed security into all layers of IT.
- Oversee data protection and privacy efforts, including encryption, data classification, DLP, and secure data sharing.
- Conduct regular internal / external audits, third-party risk assessments, and compliance checks.
- Establish and manage Identity & Access
- Manage enterprise security tools such as SIEM, endpoint protection, firewalls, IDS / IPS, and antivirus.
- Lead employee security awareness and training programs across the organization.
- Coordinate with regulators, auditors, and client teams for security reviews and certifications.
- Stay updated with BFSI-specific cyber threats and regulatory changes.
Required Skills & Qualifications
Bachelor's or Master's degree in Computer Science, Information Security, or related field.5+ years of experience in IT Security, with 2+ years in a BFSI or regulated enterprise environment.Strong knowledge of RBI cybersecurity guidelines, ISO 27001, NIST, SOC 2, and data privacy laws (DPDP / GDPR).Experience in securing enterprise applications (core banking, lending, payments, etc.) and cloud infrastructure (AWS, Azure).Hands-on experience with tools like SIEM, WAF, EDR, DLP, IAM, vulnerability scanners, and endpoint security platforms.Deep understanding of network security, application security (including mobile / web), and secure SDLC practices.Security certifications preferred : CISSP, CISM, CEH, CRISC, ISO 27001 Lead Implementer / Auditor.APPLY NOW
Skills Required
Gdpr, Network Security, Dlp, Application Security, Iso 27001, EDR, Iam, nist, Siem, Waf, Azure, Aws