We're Hiring: Head of Information Security

Bangalore Office | Full-time | Leadership Role

THE OPPORTUNITY

As we scale our loan book and expands its product suite, information security has become a board-level priority. We're looking for a Head of Information Security to define our security strategy from the ground up, serve as our primary interface with regulators including the RBI, and build the governance, operations, and culture needed to protect our customers and our business as we grow.

Head of Information Security

Bangalore Office | Full time | Leadership

KEY RESPONSIBILITIES

Strategic Leadership
Define and implement Pocketly's overall Information Security strategy, aligned with business objectives and regulatory expectations.
Act as the primary liaison with senior management and regulators (including RBI) on security-related matters.
Establish and chair the Information Security Steering Committee.

Security Operations & Risk Management
Oversee security monitoring, incident detection, and response (SIEM, SOC).
Perform regular risk assessments, vulnerability assessments, and penetration testing.
Manage identity & access control,



endpoint protection, and network security.
Lead crisis management in case of cyber incidents.

Governance, Risk & Compliance (GRC)
Ensure compliance with RBI cybersecurity and IT risk management guidelines for NBFCs/fintechs.
Lead audits, regulatory inspections, and external assessments (ISO 27001, IS, SOC, etc.).
Develop and maintain security policies, standards, and procedures.

Collaboration & Awareness
Partner with Engineering, IT, and Operations teams to embed security by design.
Lead internal training, awareness programs, and phishing simulations.

Data Privacy & Protection
Ensure compliance with India's DPDP Act and global privacy regulations where applicable.
Implement robust data classification, encryption, and retention policies.

QUALIFICATIONS & EXPERIENCE

KEY SKILLS
Deep knowledge of cybersecurity frameworks (NIST, ISO 27001, RBI Master Directions).
Solid leadership and stakeholder management skills.
Hands-on experience in risk management, incident response, and regulatory compliance.

📌 Head Of Infosec Bengaluru
🏢 Time Hack
📍 Bengaluru