- Define and operate the Bank’s data security governance framework across data discovery, classification, protection, monitoring, retention and secure disposal.
- Align data security architecture and controls with RBI expectations, PCI DSS requirements and DPDPA obligations.
- Lead the implementation and lifecycle governance of DLP, Database Activity Monitoring, encryption, HSM, tokenisation, masking and data-discovery solutions.
- Develop the annual data security roadmap, control-maturity plan and risk-based remediation priorities.
- Maintain data classification standards, sensitive-data inventories, data-flow registers and regulatory control mappings.
- Govern DLP policies, alerts, exceptions, user violations and corrective-action tracking.
- Monitor privileged and abnormal database access through DAM and other security controls.
- Drive encryption, key management, certificate lifecycle, HSM and data-masking governance.
- Monitor PCI DSS controls applicable to cardholder data storage, processing, transmission, logging and access.
- Support privacy-by-design reviews, data minimisation and secure disposal practices.
- Coordinate incident response for data leakage, unauthorised access, privacy breaches and database compromise.
- Support RBI inspections, internal audits, PCI DSS assessments, information security audits and privacy reviews.
- Maintain dashboards and KRIs/KPIs for data leakage, access anomalies,



encryption coverage and overdue audit actions.
- Evaluate automation opportunities for data discovery, DLP tuning, database monitoring and evidence collection.
- Coordinate with vendors, OEMs, system integrators and external assessors to strengthen data protection controls.

Desired Candidate Profile

- BE, B.Tech., B.Sc., BCA, MCA, M.Sc. IT, Cyber Security or an equivalent qualification.
- Postgraduate qualification in Information Security, Data Protection, Risk Management or Privacy is preferred.
- 6–8 years of relevant experience in information security, data security, privacy, database security, PCI DSS, DLP, encryption, key management or technology risk.
- Prior experience in the BFSI sector would be preferred.
- Strong knowledge of DLP, DAM, data discovery, data classification, encryption, HSM, tokenisation and data masking.
- Practical understanding of PCI DSS, DPDPA, RBI IT governance and privacy-by-design requirements.
- Experience supporting audits, regulatory reviews and data-security investigations.
- Robust analytical, regulatory-interpretation and stakeholder-management capabilities.
- Excellent documentation, written communication and escalation-management skills.
- Preferred certifications include CISSP, CISM, CISA, CDPSE, CIPM/CIPP, CRISC, ISO 27001 Lead Auditor/Implementer, PCI DSS-related certification or cloud security certification.

📌 Manager – Data Security (Bengaluru)
🏢 Ujjivan Small Finance Bank
📍 Bengaluru