Information Security Lead

The candidate will have responsibilities across the following functions:

Security Operations and Incident Response:

• Lead 24/7 Security Operations (SOC) oversight, threat hunting, and incident management workflows.
• Manage high-severity incident response (IR) procedures, forensic investigations, root-cause analyses (RCA), and mandatory regulatory notifications (e. g., CERT-In 6-hour incident reporting window).
• Design, execute, and evaluate periodic tabletop exercises and Cyber Crisis Management Plans (CCMP).

Endpoint Security, DLP and ZTNA:

• Manage, configure, and optimise EDR/XDR platforms for host-level protection and threat containment.
• Architect and refine enterprise Data Loss Prevention (DLP) strategies across endpoints, email, web gateways, and cloud stores to prevent exposure of sensitive financial/customer data.
• Lead implementation and governance of Zero Trust Network Access (ZTNA) solutions to replace legacy VPNs and enforce least-privilege access.

Network Security and Infrastructure:

• Oversee firewalls (NGFW), Intrusion Prevention Systems (IPS) and secure web gateways (SWG).
• Conduct regular network architecture reviews, micro-segmentation governance, and vulnerability management across on-premises and multi-cloud environments.
• Perform periodic configuration audits of Active Directory, network switches, routers, and VPN gateways.

Regulatory Compliance and Governance (GRC):

• Maintain continuous alignment with regulatory security frameworks including RBI Cybersecurity Framework for Banks/NBFCs/PPIs, SEBI Cybersecurity & Cyber Resilience Framework (CSCRF), and CERT-In directives.
• Direct internal and external security audits, risk assessments, regulatory reporting, and vulnerability closures requested by statutory auditors or regulators.
• Draft, maintain, and enforce enterprise-wide Information Security policies, procedures, and baseline security standards.

Requirements:

• Experience: 8-10 years of core Information Security experience with hands-on technical management across Security Operations, Infrastructure Security, and GRC.
• Regulatory Expertise: Deep operational familiarity with RBI Cybersecurity Framework, SEBI CSCRF guidelines, CERT-In incident reporting mandates, and DPDP (Digital Personal Data Protection) Act requirements.
• Hands-on tooling knowledge of EDR/XDR, DLP, ZTNA/Network Security, SIEM/SOAR tools.

Certifications (Preferred):

• ISO 27001:2022 Lead Auditor
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)