Responsibilities
Set & Manage Compliance Program for Information & Cyber Security Requirements (e.g. regulatory, ISO27001 standards, PCI DSS)
Develop a set of security standards, technical solutions, strategies, ISO requirements and best practices for the organization, and recommend security enhancements to management as needed.
You'll drive large programs across teams to address Information Security needs & influence the successful, on-time, and on-budget delivery of Information Security projects.
Develop, Maintain & oversee Information Security Policies, Processes and standards/guidelines to address all applicable regulatory and ISO requirements.
Work on recent security tools to help mitigate security vulnerabilities and automate repeatable tasks.
Development and implementation of Information & Cyber Security Assurance Program
Manage Third Party Risk Assessment Program
Handle InfoSec Audits (internal/external), Conduct Awareness Trainings
You will assist the organization towards planning and carrying out an organization's needs on InfoSec aspect & influence the successful, on-time, and on-budget delivery of Information Security projects.
Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

Industry
Fintech/ Payments,



Banking, Network, Consulting

Desired Profile
7 years of relevant experience with Software Companies (Banking/Payments/Fintech domain is preferred)
Bachelor's degree with a preference in Engineering, or technical related field with relevant certifications in security-based specialization.
Experience driving and governing audits and practice standardization (PCIDSS, ISO/IEC 27001:2022, etc) across multiple teams.
Hands on experience with audits, InfoSec compliances, Vulnerability assessments.
Experience with technologies and processes such as networks, encryption, vulnerability management, identity and access management, endpoint management, risk management, and cloud services. Valuable to have Familiarity and understanding of OWASP.
Basic knowledge of software development lifecycles and methodologies
Experience presenting and influencing top-line management and executives on the importance of Information Security.
Expert problem solver, using proven methods to solve difficult issues effectively
Proven conflict management skills and remains composed under pressure
Valuable understanding of infrastructure, including web & cloud technologies and network architecture.

📌 Sr Information Security Engineer Mumbai
🏢 BillDesk
📍 Mumbai