AVP - Information Security - BFSI

Key responsibilities

1. Managing information security from ground up and understanding gaps within technology, including overlap with other technology, compatibility etc.

2. Ensuring the proper change management, incident management, and disaster recovery management are followed.

3. Strategizing and implementing security solutions which safeguard the organizations platforms and systems.

4. Leading the information security team for effective functioning with proactive approach towards cyber risk identification and management.

5. Working actively for it risk management (includes operational risk, audits, technology security, IT business process management)

6. Playing a key role in ensuring compliances in financial domain towards of the RBI IT Master Direction, cert-in and other mandatory compliances.

7. Operates as a key contributor to third-party risk assessment, cloud security assessment, infrastructure and web application security assessments etc.

8. Working actively towards strategic development of information security framework, risk management and new initiatives in the cyber risk teams.

9. Serving as a mentor or a subject-matter expert to other infosec team members and/or stakeholders throughout the organization

Technical Skills

1. Having in-depth knowledge of infrastructure security, application security, cryptography, security risk management, DLP, vulnerability and patch management, IAM, insider risk, system hardening.

2. Must have strong experience in information security management system (isms), creation of policy, procedures, and implementation.

3. Good knowledge of BCP/DR, incident response, VA/PT and audit methodologies of various compliance frameworks.

4. Good knowledge of access management, network, application security, encryption, backup, physical security, isms training & awareness etc.

5. Ability to deal with the customers and vendors on security and privacy matters.

6. Knowledge of core it processes, SDLC, network infrastructure will be useful.

7. Senior management cyber and information technology risk reporting

8. Total 10+ years of working experience with at least 3-5 years of proven information and cyber security experience, preferable in the banking or financial industry.

Personal Skills

1. Strong analytical skills, meticulous and organized.

2. Proficient in MS office applications and able to produce clear, concise management reports.

3. Experience in automating reports preferred.

4. Good interpersonal and communication skills (spoken and written)