Role & responsibilities

- Lead compliance with RBI PSS, Cyber Resilience/DPSC, C-SITE, PCI DSS and ISO/IEC 27001.

- Coordinate internal, external and regulatory audits and ensure closure of observations.

- Develop and maintain information security & information technology policies, standards, SOPs documentation.

- Manage IVA, IPT, EPT, App PT, FRR, ASV scans, and remediation tracking.

- Initiating periodic activities required under regulatory norms and monitoring them until completion

- Coordinate security incident response, RCA and corrective actions.

- Monitor risk-related advisories and ensure necessary actions are taken by internal stakeholders.

- Collaborate with IT, business teams, auditors and vendors.

- Coordinate internal stakeholders for Disaster Recovery Drill and Business Continuity Plan activity.

- User Access Review of difference applications.





- Ensuring compliance of the current application during onboarding

Key Performance Indicators

- Regulatory compliance status

- Timely audit completion

- Audit observation closure within SLA

- Policy review completion

- Critical vulnerability remediation within SLA

- Risk assessment completion

- Incident response SLA adherence

- Security reporting accuracy

Technical Skills

- PCI DSS

- RBI PSS

- Cyber Resilience/DPSC

- ISO 27001

- RBI Cyber Security Guidelines

- Risk Assessment

- Vulnerability Management

- Incident Response

- BCP/DR

- Patch Management

- User Access Reviews

- Firewall Ruleset Reviews

Soft Skills

- Leadership

- Communication

- Stakeholder Management

- Analytical Thinking

- Documentation

- Problem Solving

📌 Manager - Information Security (Mumbai)
🏢 Findi India
📍 Mumbai