Chief Information Security Officer - FinTech

Client - Our client is one of the finest FinTech companies in India . Financed by some of the best VC's , it has been rapidly expanding for the last 3 years .

The role is based in Bangalore and reports to one of the Founders

Definitely Need someone with Experience in Fintech industry with a good history of working with SEBI, RBI, IRDA, ISO27k regulators OR in a B2C firm . This role is NOT for a pure B2B background person

It would be great if the person has Information Security Certifications like - CISA, CISM, CEH...etc

We need someone with more than 12 years experience, and atleast 3 years in a leadership role with excellent education pedigree and communication skills 

Key Result Areas 

- Direct and approve the design of security systems;

- Manage Security Audits and Compliance as per - Government Agencies like- SEBI, RBI, ...etc 

- Ensure that disaster recovery and business continuity plans are in place and tested;

- Review and approve security policies, controls and cyber incident response planning;

- Approve identity and access policies;

- Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities;

- Maintain a current understanding the IT threat landscape for the industry;

- Ensure compliance with the changing laws and applicable regulations;

- Translate that knowledge to identification of risks and actionable plans to protect the business;

- Schedule periodic security audits;

- Oversee identity and access management;

- Make sure that cyber security policies and procedures are communicated to all personnel and that compliance is enforced;

- Manage all teams, employees, contractors and vendors involved in IT security, which may include hiring;

- Provide training and mentoring to security team members;

- Constantly update the cyber security strategy to leverage new technology and threat information;

- Brief the executive team on status and risks, including taking the role of champion for the overall strategy and necessary budget; and

- Communicate best practices and risks to all parts of the business, outside IT