Job Description : - Define and operate the Bank's data security governance framework across data discovery, classification, protection, monitoring, retention and secure disposal.- Align data security architecture and controls with RBI expectations, PCI DSS requirements and DPDPA obligations.- Lead the implementation and lifecycle governance of DLP, Database Activity Monitoring, encryption, HSM, tokenisation, masking and data-discovery solutions.- Develop the annual data security roadmap, control-maturity plan and risk-based remediation priorities.- Maintain data classification standards, sensitive-data inventories, data-flow registers and regulatory control mappings.- Govern DLP policies, alerts, exceptions, user violations and corrective-action tracking.- Monitor privileged and abnormal database access through DAM and other security controls.- Drive encryption, key management, certificate lifecycle, HSM and data-masking governance.- Monitor PCI DSS controls applicable to cardholder data storage, processing, transmission, logging and access.- Support privacy-by-design reviews, data minimisation and secure disposal practices.- Coordinate incident response for data leakage, unauthorised access, privacy breaches and database compromise.- Support RBI inspections, internal audits, PCI DSS assessments, information security audits and privacy reviews.- Maintain dashboards and KRIs/KPIs for data leakage, access anomalies,



encryption coverage and overdue audit actions.- Evaluate automation opportunities for data discovery, DLP tuning, database monitoring and evidence collection.- Coordinate with vendors, OEMs, system integrators and external assessors to strengthen data protection controls.Desired Candidate Profile : - BE, B.Tech, B.Sc, BCA, MCA, M.Sc IT, Cyber Security or an equivalent qualification.- Postgraduate qualification in Information Security, Data Protection, Risk Management or Privacy is preferred.- 6 - 8 years of relevant experience in information security, data security, privacy, database security, PCI DSS, DLP, encryption, key management or technology risk.- Prior experience in the BFSI sector would be preferred.- Strong knowledge of DLP, DAM, data discovery, data classification, encryption, HSM, tokenisation and data masking.- Practical understanding of PCI DSS, DPDPA, RBI IT governance and privacy-by-design requirements.- Experience supporting audits, regulatory reviews and data-security investigations.- Solid analytical, regulatory-interpretation and stakeholder-management capabilities.- Excellent documentation, written communication and escalation-management skills.- Preferred certifications include CISSP, CISM, CISA, CDPSE, CIPM/CIPP, CRISC, ISO 27001 Lead Auditor/Implementer, PCI DSS-related certification or cloud security certification. (ref:hirist.tech)

📌 Ujjivan Small Finance Bank - Manager - Data Security (Bengaluru)
🏢 Ujjivan small finance bank
📍 Bengaluru