Key Responsibilities:

Daily security operations and control testing

- Perform and document routine security checks across endpoints, servers, cloud/on-premises environments, network devices, applications and security tools according to approved runbooks.
- Review security alerts, SIEM logs, endpoint detection and response (EDR), anti-malware status, privileged activity, suspicious authentication events and other indicators; triage and escalate anomalies.
- Monitor vulnerability findings, patch status, insecure configurations, exposed services, certificate expiry, backup/security job exceptions and remediation progress.
- Review user access requests, privileged access, joiner-mover-leaver controls, periodic access recertification and segregation-of-duties exceptions with system owners.
- Support incident handling, evidence preservation, initial impact assessment, incident documentation, lessons learned and tracking of corrective actions.

Security assessments and technical controls
- Coordinate vulnerability assessment and penetration testing (VAPT), configuration reviews, application/API security testing, cloud security reviews and remediation validation.
- Support secure configuration baselines, hardening, encryption, key/certificate management, network segmentation, MFA, endpoint security, data-loss prevention and secure remote access.
- Review changes and new technology deployments for security risks; participate in change-management, architecture and release reviews as assigned.
- Support backup restoration tests, disaster recovery and business continuity exercises, and verify that security requirements are incorporated into recovery plans.




- Work with IT, DevOps, cloud, application, infrastructure and third-party teams to resolve security findings within agreed risk-based timelines.

RBI / CERT-In compliance and audit support

- Maintain a compliance tracker mapping applicable RBI directions, CERT-In directions, internal policies and contractual requirements to controls, owners, evidence and remediation status.
- Support evidence collection for internal audits, external audits, regulatory inspections, risk assessments and control attestations.
- Help maintain incident registers, security logs, asset inventories, risk registers, exceptions, VAPT reports, remediation records and security awareness records.
- Support incident reporting and record-preservation processes in line with applicable CERT-In directions and the organization's incident response procedures.
- Assist with third-party risk assessments, security questionnaires, due diligence, periodic reviews and tracking of vendor remediation commitments.

Required Skills & Experience:

Must-have

- 3–8 years of relevant information security, cyber security, security operations, IT risk or security compliance experience; fintech, NBFC, banking or payments experience is strongly preferred.




- Active CISSP certification (candidate should provide certification status and validity details).
- Sound understanding of security fundamentals: identity and access management, network security, endpoint protection, vulnerability management, secure configuration, encryption, logging/monitoring, incident response and data protection.
- Practical familiarity with SIEM, EDR/antivirus, vulnerability scanners, ticketing/GRC tools, cloud security consoles and common infrastructure/application security controls.
- Working knowledge of RBI IT/cyber security requirements applicable to the employer’s regulated category and CERT-In incident reporting/log-retention directions.
- Positive written and verbal communication; able to explain technical findings to non-technical stakeholders and produce clear evidence-based reports.

Preferred

- Hands-on experience with AWS/Azure/GCP security, API security, DevSecOps, container security, DLP, PAM, IAM or security automation.
- Experience supporting ISO 27001, SOC 2, PCI DSS or other relevant security assurance frameworks.
- Relevant degree in computer science, information technology, engineering or a related discipline and certification in Information security.

Success Measures (Illustrative)

- Completion and quality of scheduled security checks and evidence.
- Timely triage and escalation of security events; remediation of vulnerabilities within approved timelines.
- Reduction in overdue high-risk findings and repeat control failures.
- Audit readiness, accurate compliance mapping and effective coordination with technology/control owners.

📌 Cyber Security Specialist (Noida)
🏢 Fintech Cloud
📍 Noida