Cyber Security Specialist

Role & responsibilities:

• Perform and document routine security checks across endpoints, servers, cloud/on-premises environments, network devices, applications and security tools according to approved runbooks.
• Review security alerts, SIEM logs, endpoint detection and response (EDR), anti-malware status, privileged activity, suspicious authentication events and other indicators; triage and escalate anomalies.
• Monitor vulnerability findings, patch status, insecure configurations, exposed services, certificate expiry, backup/security job exceptions and remediation progress.
• Review user access requests, privileged access, joiner-mover-leaver controls, periodic access recertification and segregation-of-duties exceptions with system owners.
• Support incident handling, evidence preservation, initial impact assessment, incident documentation, lessons learned and tracking of corrective actions.

Security assessments and technical controls

• Coordinate vulnerability assessment and penetration testing (VAPT), configuration reviews, application/API security testing, cloud security reviews and remediation validation.
• Support secure configuration baselines, hardening, encryption, key/certificate management, network segmentation, MFA, endpoint security, data-loss prevention and secure remote access.
• Review changes and new technology deployments for security risks; participate in change-management, architecture and release reviews as assigned.
• Support backup restoration tests, disaster recovery and business continuity exercises, and verify that security requirements are incorporated into recovery plans.
• Work with IT, DevOps, cloud, application, infrastructure and third-party teams to resolve security findings within agreed risk-based timelines.

RBI / CERT-In compliance and audit support

• Maintain a compliance tracker mapping applicable RBI directions, CERT-In directions, internal policies and contractual requirements to controls, owners, evidence and remediation status.
• Support evidence collection for internal audits, external audits, regulatory inspections, risk assessments and control attestations.
• Help maintain incident registers, security logs, asset inventories, risk registers, exceptions, VAPT reports, remediation records and security awareness records.
• Support incident reporting and record-preservation processes in line with applicable CERT-In directions and the organisations incident response procedures.
• Assist with third-party risk assessments, security questionnaires, due diligence, periodic reviews and tracking of vendor remediation commitments.

Required Skills & Experience Must-have

• 3–8 years of relevant information security, cyber security, security operations, IT risk or security compliance experience; fintech, NBFC, banking or payments experience is strongly preferred.
• Active CISSP certification (candidate should provide certification status and validity details).
• Sound understanding of security fundamentals: identity and access management, network security, endpoint protection, vulnerability management, secure configuration, encryption, logging/monitoring, incident response and data protection.
• Practical familiarity with SIEM, EDR/antivirus, vulnerability scanners, ticketing/GRC tools, cloud security consoles and common infrastructure/application security controls.
• Working knowledge of RBI IT/cyber security requirements applicable to the employer’s regulated category and CERT-In incident reporting/log-retention directions.
• Good written and verbal communication; able to explain technical findings to non-technical stakeholders and produce clear evidence-based reports.

• Preferred:
• Hands-on experience with AWS/Azure/GCP security, API security, DevSecOps, container security, DLP, PAM, IAM or security automation.
• Experience supporting ISO 27001, SOC 2, PCI DSS or other relevant security assurance frameworks.
• Relevant degree in computer science, information technology, engineering or a related discipline and certification in Information security.

Success Measures (Illustrative)

• Completion and quality of scheduled security checks and evidence.
• Timely triage and escalation of security events; remediation of vulnerabilities within approved timelines.
• Reduction in overdue high-risk findings and repeat control failures.
• Audit readiness, accurate compliance mapping and effective coordination with technology/control owners.

Reporting / Interfaces:

Reports to: Information Security Manager / CISO / Head of Technology Risk. Works with SOC/MSSP, IT Infrastructure, Applications, Cloud/DevOps, Risk, Compliance, Internal Audit and vendors.