Senior Manager - Information Security (GRC) - J50641

Role & responsibilities

Work Location: Andheri (W) Veera Desai Road (Supreme Chambers) Nearest Metro Railway Station: Azad Nagar.

Job Title: Senior Manager, Information Security – GRC

Position: Senior Manager, Information Security
Role: Information Security Officer

Responsibilities
Maintain, implement and periodically review the organization`s Information Security policies, standards, procedures and guidelines to ensure alignment with applicable regulatory requirements, PCI DSS, ISO 27001, CERT-In, DPDP and industry best practices.
Assist the CISO in developing and enhancing the organization`s Information Security governance framework, policies, standards and security processes based on evolving regulatory requirements, emerging cyber threats and business needs.
Work closely with Product, Engineering, Application Development, Infrastructure, Cloud and Operations teams to ensure security controls are embedded into technology platforms, applications and operational processes.
Review the security architecture of new products, applications, infrastructure and technology initiatives and recommend appropriate security controls based on security-by-design principles.
Conduct periodic management reviews of critical security controls including Firewall Rules, Web Application Firewall (WAF), Identity & Access Management (IAM), User Access Management, Privileged Access Management (PAM), Network Security, Endpoint Security and other information security controls, and ensure timely remediation of identified gaps.
Conduct technical security assessments of applications, infrastructure and enterprise security controls, identify areas of improvement and drive implementation of corrective actions.




Develop, implement and periodically review Information Security aspects of Business Continuity and Cyber Resilience plans to ensure resilience of critical business services.
Lead and coordinate enterprise Information Security initiatives and projects including Data Loss Prevention (DLP), Security Information and Event Management (SIEM), Vulnerability Assessment & Penetration Testing (VAPT), Identity & Access Management (IAM), DPDP compliance, Security Automation, Cybersecurity AI and other strategic security programs.
Engage and coordinate with external consultants, technology partners and service providers for implementation of information security solutions and ensure successful delivery of security projects.
Review security exceptions, risk acceptance requests and compensating controls, ensuring appropriate approvals, documentation and mitigation measures are in place.
Support internal and external audits by implementing remediation actions, coordinating closure of observations and strengthening security controls across the organization.
Develop security dashboards, governance reports, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs) and management reports for the CISO and senior leadership.
Promote security awareness, secure development practices and a strong security culture across the organization.

Experience




6 to 10 years of hands-on experience in Information Security Governance, Information Security Management, Security Architecture or Cyber Security within Banks, Financial Institutions, Payment Aggregators, FinTech organizations or Information Security Consulting firms.
Experience implementing Information Security programs aligned with RBI regulations, PCI DSS, ISO 27001, CERT-In directions and DPDP requirements.
Experience working with Product Engineering, Infrastructure and Cloud teams to implement security controls across enterprise environments.
Experience implementing enterprise security technologies such as DLP, SIEM, IAM/PAM, Vulnerability Management, Security Monitoring, Endpoint Security, Network Security and Cloud Security solutions.
Experience managing cross-functional security initiatives and coordinating implementation across multiple technology teams.

Skills
Information Security Governance
Information Security Policy & Standards Management
Security Architecture and Secure Design Review
Identity & Access Management
Network Security and Infrastructure Security
Information Security Risk Assessment
Security Control Reviews
Regulatory Security Requirements (RBI, PCI DSS, ISO 27001, CERT-In, DPDP)
Business Continuity and Cyber Resilience
Security Metrics, Governance Reporting and Executive Communication
Robust stakeholder management and cross-functional collaboration skills

Qualifications: Bachelor’s Degree in Information Security/ Computer Science; Certified Information Systems Auditor (CISA); Certified Information Security Manager (CISM); PCI DSS/ ISO 27001 – Lead Auditor or Implementer

📌 Senior Manager - Information Security (GRC) (Mumbai)
🏢 Sampoorna Consultants
📍 Mumbai