Cyber Security Specialist

About Indian Digital Payment Intelligence Corporation (IDPIC)

Indian Digital Payment Intelligence Corporation (IDPIC) is a Section 8 company, incorporated under the Companies Act, 2013. It is promoted by the State Bank of India (SBI) and Bank of Baroda, along with other banks/payment companies, and functions under the regulatory approval and oversight of the Department of Financial Services and the Reserve Bank of India (RBI). IDPIC has been established as the nation's central digital payment fraud intelligence platform. Its primary mandate is to detect, prevent, and analyse fraud in India's rapidly expanding digital payments ecosystem in real time. Leveraging cutting-edge technologies, including Artificial Intelligence (AI), Machine Learning (ML), and Big Data Analytics, IDPIC plays a pivotal role in strengthening the security and trustworthiness of India's digital payment infrastructure.

Position Overview:

The Cyber Security Specialist will be responsible for protecting the DPIP platform, infrastructure, applications, data and network environment against cyber threats, and ensuring implementation of security controls, continuous security monitoring, vulnerability management, incident response and compliance with applicable RBI, regulatory and information-security requirements.

Qualification and Eligibility Criteria:

Bachelor's degree in Computer Science / Information Technology / Cyber Security / Electronics / Computer Engineering / Information Security or equivalent qualification from a recognised university/institution.

Preferred : Master's degree in Computer Science, Cyber Security, Information Security, IT or a related discipline.

Work Experience :

3+ years of relevant experience in Cyber Security / Information Security, with hands-on experience in at least several of the following:Cyber-security operations and SOC, SIEM and security monitoring, Incident detection and responseVulnerability management, VAPT, Network security, Application and API security, Cloud securitySecurity architecture, IAM and access management, Security risk assessment, ISO 27001 / NIST / CIS frameworksSecurity audits and compliance, Experience in BFSI, banking, financial services, digital payments, fintech or critical information infrastructure would be highly desirable.

Preferred certifications: CISSP, CISM, CISA, CRISC, CEH, OSCP, CompTIA Security+, CCSP Relevant cloud-security certifications such as AWS/Azure/GCP Security

Key Responsibilities:

1. Cybersecurity Architecture & Infrastructure Protection: Design, implement, and maintain security controls across DPIP's applications, networks, cloud/on-premise infrastructure, databases, endpoints, and APIs, including secure configurations, segmentation, encryption, and access controls.
2. Security Monitoring & Incident Response: Monitor security events, logs, alerts, and threat intelligence to detect, investigate, contain, and resolve cybersecurity incidents, including root-cause analysis and corrective actions.
3. Vulnerability Management & Security Testing: Conduct and coordinate vulnerability assessments, VAPT, application/API security testing, patch management, system hardening, and timely remediation of identified security gaps.
4. Identity, Data Security & Compliance: Manage access controls, privileged access, authentication, data protection, and privacy measures while supporting compliance with applicable RBI, CERT-In, ISO 27001, PCI-DSS, and other relevant requirements.
5. Security Governance, Risk & Resilience: Conduct security risk assessments, maintain security documentation and reporting, oversee third-party security requirements, and strengthen business continuity, disaster recovery, cyber resilience, and overall security posture.