Job Description
Role - Information Security Officer
nExperience - 3-5 yrs
nLocation - Mumbai
n

n
n Responsibilitie
n
- n
- sOwn and drive information security governance, risk management, compliance, and audit readinessn
- .Manage the audit and compliance calendar, including bank audits, regulatory reviews, partner reviews, security questionnaires, and external assessmentsn
- .Maintain audit and compliance readiness for ISO 27001, PCI DSS, DL-SAR, CICRA, RBI Cyber Security Framework, Digital Lending Guidelines, DPDP/data privacy, and other applicable requirementsn
- .Maintain policies, procedures, risk registers, audit evidence, compliance trackers, security documentation, and closure reportsn
- .Conduct and coordinate internal reviews for access control, privileged access, policy compliance, vendor security, cloud security, and security configurationsn
- .Coordinate VAPT, source code reviews, cloud security reviews, configuration reviews, SAST/DAST activities, and remediation trackingn
- .Work with Technology, DevOps, IT, Compliance, HR/Admin, vendors,



and business teams to close vulnerabilities, audit findings, security gaps, incidents, and risksn
- .Own and drive security incident response execution, including escalation coordination, RCA tracking, corrective actions, evidence documentation, closure reports, and periodic drillsn

n.Required Skill
n
- n
- sGood understanding of information security, GRC, IT risk, audits, compliance, and cybersecurity controlsn
- .Working knowledge of application security, API security, cloud security, IAM, vulnerability management, incident response, secure SDLC, and vendor securityn
- .Understanding of ISO 27001, PCI DSS, RBI Cyber Security Framework, Digital Lending Guidelines, banking/fintech requirements, and data protection requirementsn
- .Ability to assess technical security risks, define controls, and coordinate remediation with technical teamsn
- .Solid audit handling, evidence management, document

📌 Information Security Officer (Mumbai)
🏢 Recro
📍 Mumbai