Position Summary:

We are seeking a skilled and proactive Assistant Manager – Information Security Audit and Vulnerability Management to join our dynamic team. The ideal candidate will have prior experience in the Indian stock broking industry, with a solid understanding of SEBI and other regulatory requirements, strong technical expertise in security assessments, and the ability to communicate effectively with foreign clients and senior management.

Key Responsibilities:

- Lead and manage periodic internal and external security audits, including system, process, and compliance audits.
- Monitor and coordinate vulnerability assessments and penetration testing (VAPT), ensuring timely remediation of identified issues.
- Act as a liaison with regulatory authorities (SEBI, NSE, BSE, CDSL, NSDL, etc.), internal / external auditors, clients and ensure compliance with applicable cyber security guidelines and circulars.
- Interpret and translate complex regulatory and technical requirements into explicit, actionable security controls.
- Prepare and present audit findings, risk assessments, and security posture reports to senior management and international clients in a clear and concise manner.
- Collaborate with IT, DevOps, Infrastructure, and Business teams to drive timely closure of audit and vulnerability findings.





Required Qualifications & Experience:

- Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related field.
- 5–8 years of experience in Information Security, preferably within a stock broking firm or capital markets organization in India.
- Proven experience with SEBI circulars, RBI/IRDA guidelines, and IT security audits.
- Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS) and SIEM platforms.
- Strong understanding of network and application security, encryption standards, and data privacy regulations.
- Relevant certifications such as CISA, CISSP, CEH, ISO 27001 LA/LI are highly preferred.

Key Skills:

- Strong analytical and problem-solving skills.
- Ability to articulate regulatory and technical concepts to non-technical stakeholders.
- Excellent written and verbal communication skills, with experience handling foreign clients and executive-level presentations.
- Ability to work independently and as part of a cross-functional team.
- Project management skills and attention to detail.

Preferred Attributes:

- Experience working in a hybrid or distributed team environment.
- Prior involvement in red/blue team exercises, or threat intelligence initiatives is a plus.

📌 Assistant Manager - Information Security Audit and Vulnerability Management (Mumbai)
🏢 Nuvama Group
📍 Mumbai