OBJECTIVE OF JOB To lead and grow the cybersecurity assurance and compliance business – Information System audits for banks and financial institutions, SWIFT CSP independent assessments, TPN (MPA) content security assessments and ISO/IEC 27001 implementations – by ensuring high-quality, regulation-aligned delivery, strengthening client relationships, supporting business development and building a certified, high-performing team.
• Vulnerability Assessment & Penetration Testing (VAPT) is handled by a separate dedicated team and is not a core responsibility of this role.
• The role is expected to understand VAPT outputs well enough to use them as evidence in audits and assessments, and to coordinate scoping and consolidated reporting with the VAPT team. EDUCATIONAL QUALIFICATION & CERTIFICATIONS
•

Education:
Bachelor’s or master’s degree in computer science, Information Technology, Cybersecurity, Electronics or a related discipline (MBA / PG in risk or audit is an advantage).
• Essential: At least one of CISA, CISSP, CISM, or ISO/IEC 27001 Lead Auditor / Lead Implementer.
• Preferred: SWIFT CSP Certified Assessor (Lead Assessor) – strongly preferred.
• Additional advantage: CRISC, CDPSE, ISO 22301 / 27701 Lead Auditor, PCI DSS (QSA/ISA), CCSP, TPN assessor accreditation or equivalent exposure. EXPERIENCE
• 12+ years of experience in cybersecurity, IS audit, IT risk and compliance or consulting, with at least 5 years leading IS audits for banks / financial institutions.
• Demonstrated, hands-on experience in RBI-regulated environments and exposure to at least one other international regulatory regime.




• Experience delivering SWIFT CSP / CSCF assessments; TPN / MPA content security assessments; and multiple end-to-end ISO 27001 implementations through certification.
• Proven experience leading teams, reviewing reports, managing senior client stakeholders and supporting proposals/business development.

KEY RESPONSIBILITIES
• Information Systems (IS) Audit & Regulatory Assurance – Banking & Financial Services
• SWIFT Customer Security Programme (CSP) Independent Assessments
• Trusted Partner Network (TPN) / MPA Content Security Assessments
• ISO/IEC 27001 and Other Framework Implementation & Certification Readiness
• Business Development, Proposal Management & Pre-Sales
• Delivery Management, Quality Assurance & Governance
• Client Relationship & Global Account Management
• Team Leadership, Development & Capability Building
• Knowledge Management & Thought Leadership
• Commercial Management & Operational Effectiveness KEY SKILLS & KNOWLEDGE
• Deep understanding of RBI IT/cyber regulations and IS audit methodology (ISACA ITAF, COBIT), plus awareness of global banking cyber regulations.
• Working knowledge of SWIFT architecture, CSCF controls and assessment practice.
• Familiarity with MPA Content Security Best Practices, TPN+ assessment workflow and media workflow security (site, cloud, application).
• Solid command of ISO/IEC 27001:2022, ISO 27002, risk assessment methods and integrated management systems.
• Technical understanding of network, cloud, identity and access, endpoint, SIEM/SOC, secure SDLC and DR/BCP controls sufficient to challenge evidence.
• Excellent report writing, presentation and negotiation skills; ability to explain risk to Board-level audiences.

📌 Practice Lead (Pune)
🏢 MVLCO Centre for Banking and FinTech
📍 Pune