Position Summary:

nWe are seeking a skilled and proactive Assistant Manager – Information Security Audit and Vulnerability Management to join our dynamic team. The ideal candidate will have prior experience in the Indian stock broking industry, with a solid understanding of SEBI and other regulatory requirements, strong technical expertise in security assessments, and the ability to communicate effectively with foreign clients and senior management.

n

nKey Responsibilities:

n

n
- Lead and manage periodic internal and external security audits, including system, process, and compliance audits.
n
- Monitor and coordinate vulnerability assessments and penetration testing (VAPT), ensuring timely remediation of identified issues.
n
- Act as a liaison with regulatory authorities (SEBI, NSE, BSE, CDSL, NSDL, etc.), internal / external auditors, clients and ensure compliance with applicable cyber security guidelines and circulars.
n
- Interpret and translate complex regulatory and technical requirements into clear, actionable security controls.
n
- Prepare and present audit findings, risk assessments, and security posture reports to senior management and international clients in a clear and concise manner.
n
- Collaborate with IT, DevOps, Infrastructure, and Business teams to drive timely closure of audit and vulnerability findings.
n

n

nRequired Qualifications & Experience:

n





n
- Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related field.
n
- 5–8 years of experience in Information Security, preferably within a stock broking firm or capital markets organization in India.
n
- Proven experience with SEBI circulars, RBI/IRDA guidelines, and IT security audits.
n
- Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, OpenVAS) and SIEM platforms.
n
- Solid understanding of network and application security, encryption standards, and data privacy regulations.
n
- Relevant certifications such as CISA, CISSP, CEH, ISO 27001 LA/LI are highly preferred.
n

n

nKey Skills:

n

n
- Strong analytical and problem-solving skills.
n
- Ability to articulate regulatory and technical concepts to non-technical stakeholders.
n
- Excellent written and verbal communication skills, with experience handling foreign clients and executive-level presentations.
n
- Ability to work independently and as part of a cross-functional team.
n
- Project management skills and attention to detail.
n

n

nPreferred Attributes:

n

n
- Experience working in a hybrid or distributed team environment.
n
- Prior involvement in red/blue team exercises, or threat intelligence initiatives is a plus.
n

n

📌 Assistant Manager - Information Security Audit and Vulnerability Management (Mumbai)
🏢 Nuvama Group
📍 Mumbai