Information Security Manager

JOB DESCRIPTION: MANAGER - INFORMATION SECURITY

Company: Digamber Capfin Limited, NBFC

Department: Information Technology / Information Security

Designation: Manager Information Security

Location: Jaipur

Reporting To: CISO

Functional Coordination: Compliance, Risk Management, Internal Audit, HR, Legal and Business Teams

Role Purpose: The Manager Information Security shall be responsible for establishing, implementing, monitoring and continuously strengthening the Companys Information Security and Cyber Security framework. The role shall cover the Companys complete technology environment including LOS, LMS, internally developed applications, HRMS, training applications, cloud infrastructure, databases, servers, Active Directory, firewalls, networks, Wi-Fi, laptops/desktops, employee BYOD/mobile devices, APIs, source-code repositories, storage devices, backups and third-party technology services. The incumbent shall also be responsible for coordinating and ensuring compliance with applicable RBI Information Technology and Cyber Security requirements, CERT-In directions, UIDAI/Aadhaar requirements including AUA/KUA or Sub-AUA/Sub-KUA requirements, data protection requirements and other applicable information-security regulations.

Key Responsibilities:

• Information Security Governance
• Cyber Security Operations
• LOS/LMS & Application Security
• Access & Identity Management
• VAPT, Vulnerability & Patch Management
• AUA/KUA & UIDAI Compliance
• BYOD & Mobile Security
• Data Security & DLP
• Security Incident Management & CERT-In
• Cloud & Third-Party Security
• Business Continuity & Disaster Recovery
• Information Security Awareness

Qualification:

B.E./B.Tech/BCA/MCA/M.Sc. IT/Computer Science or equivalent recognised qualification.\

Any one or more of:

• CISA
• CISM
• CISSP
• CEH
• ISO 27001 Lead Auditor/Lead Implementer
• CCSP / Cloud Security certification
• Relevant cyber-security certification

Preferred: 5 to 8 years of relevant experience in Information Security/Cyber Security, preferably in:

1) NBFC/Bank/FinTech/BFSI; and/or

2) regulated financial-services technology environment.