Vice President - Cloud & Digital Security - BFS

Hiring for Vice President Cloud & Digital Security Bangalore

- Responsible for the Cloud and Digital security architecture of Cloud & digital eco system across the group, threat landscape, risk assessments and security benchmarks.

- Establish cloud security controls to protect applications across a large and complex environment.

- Evaluate, test and certify new technologies that improve digital data assets and platform.

- Establish and maintain policies and procedures for consideration, evaluation, qualification of Digital technologies, that includes meeting business, architectural, security, development, operational standards.

- Help business leverage technology with effective action plans for end user adoption (including customer/user experience) with minimal business risk.

- Advise technology and business leaders on pros and cons of a chosen non-standard digital technology tool/platform/solution and offer potential remedies or alternatives as needed.

- Develop and deploy Key Performance Indicators (KPIs) to assess technological leverage, and their impact on business.

- Responsible for designing security solutions for Cloud, Digital, Microservices, API Technology, and DevSecOps in collaboration with various teams Cloud technology team, Enterprise Infrastructure, Digital, GRC, Audit and other business stakeholders. Ensure the Cloud and Digital security solutions meet , governance, control practices and data privacy policies.

- Lead cloud / digital transformation initiatives, including cloud migration strategy, application cloud suitability/readiness assessment, migration planning, sourcing options.

- Participate in meeting with senior leaders to represent Cloud Security and Security Platforms performance and interests.

- Responsible for designing, developing and maintaining cloud security architecture of multi-cloud ecosystem.

- Accountability to develop and maintain cloud security baselines and guidelines aligned to Information Security Policies and initiatives.

- Cloud and Digital Ecosystem, Microservices and Open API Framework, BlockChain related technology

- Enterprise Infrastructure, Business Technology, and related Application

- Security frameworks such as NESA, CIS, NIST, SOC2, ISO

- Information Security regulations: NY DFS CRR 500, FFIEC, RBI Cyber Security Framework, HKMA CRAF and SPM

- Information Security governance frameworks such as ISO27001, NIST 800 series, COBIT, SABSA etc.

- Data privacy regulations such as GDPR, PDPO, PDPB, PDPL etc.

- Payment industry standards including PCI DSS, PA-DSS, PCI-PTS, VISA PIN Security, SWIFT CSP etc