- Implement and maintain ISMS per ISO 27001 and RBI cyber security framework for NBFC.
- Develop security policies and ensure alignment with RBI IT governance directions.
- Track compliance with CERT-In directives and DPDP Act requirements; coordinate regulatory audits.
Risk & Assessments:
- Conduct IT risk assessments and maintain Risk Register, track remediation.
- Perform gap assessments against ISO 27001, RBI guidelines, and DPDP requirements.
- Assess third-party/vendor security and compliance posture.
Incident & Data Protection:
- Support incident response; ensure CERT-In notification compliance and data breach management.
- Participate in RCA and security exception tracking.
Reporting & Documentation:
- Prepare audit reports, compliance dashboards, and board-level security metrics.
- Document SOPs, policies, and management review reports aligned with regulatory requirements.