MUMBAI · FULLTIME
Sr Leader Information Security
National Payments Corporation of India
Mumbai · onsite · Posted 9d ago
Sourced from
Undisclosed10–15 yrsfulltimeMumbai
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
What you own
What sets you apart
Major Challenges
Decisions Made by the Job Holder
Requirements
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
This role is responsible for ascertaining and overseeing the risk and security guidelines and controls applicable to third parties interacting with NPCI. It will ensure ecosystem-wide compliance with evolving security requirements arising from innovations across the organization.
The core focus of the role will be to ensure that member banks and TPAPs comply with the standards laid down by NPCI. It will also interface with CERT-In, NCIIPC, NCCC, RBI, MeitY and other government bodies on cybersecurity-related matters.
The role will also play a key part in addressing privacy-related aspects, including adherence to the DPDP Act, GDPR and other applicable data protection requirements.
What you own
- Stakeholder Management and Leadership: Provide direction on regulatory compliance and cybersecurity protection.
- Demonstrate a thorough understanding of international governance and management principles.
- Engage with multiple stakeholders across organizational boundaries.
- Risk and Control Objectives: Develop and maintain robust international information security controls.
- Provide an external perspective to strengthen the design and implementation of security controls.
- Lead and review assessments for external agencies and members.
- Decision-Making and Problem-Solving: Make decisions regarding the maintenance of the security posture of the organization and its subsidiaries.
- Identify emerging global cyber-threat trends and align organizational strategy to address them.
- Provide solutions to address international challenges related to security architecture.
- Specialization in Multiple Security Domains: Act as a subject matter expert (SME) across multiple internal security domains, such as Identity and Access Management (IAM), infrastructure security, application security cloud security, and Data Privacy and DPDP Act.
- Engage with development teams to enable DevSecOps.
- Demonstrate SME-level knowledge of key security and data protection standards and frameworks, such as GDPR, CIS, ISO 27001, NIST and PCI DSS.
What sets you apart
Major Challenges
- Coordinating with external entities and multiple stakeholders on information security-related matters.
- Identifying security gaps and following up to ensure their closure.
- Focusing information security operations on external parties and addressing data protection and privacy-related concerns.
Decisions Made by the Job Holder
- Reviewing and verifying controls relating to third-party applications and member banks.
- Certifying third parties associated with NPCI.
- Reviewing information security controls and guidelines followed by TPAPs and member banks.
- Effectively addressing various data-related concerns, as required by the Data Protection Officer (DPO), and ensuring adherence to DPDP and GDPR requirements.
- Conducting various third-party audits to ensure acceptable levels of cyber hygiene.
Requirements
- Understanding of cybersecurity maturity frameworks and information security standards like, but not limited to, ISO 27701, GDPR, PCI DSS, NIST 800-53, CIS 20, ISO 22301.
- Experience at engaging, influencing, and managing multiple stakeholders across departmental and organizational boundaries up to C-suite.
- Excellent understanding of legislations and regulations that impact information security, eg GDPR.
- Develop, implement and administer technical security standards as well as a suite of security practices.
- Understanding of cloud service deployment and architecture with implementation experience on multiple cloud platforms like AWS, Azure, GCP etc
- Good understanding of security technologies and wider payment business solutions like Firewall, IDS/IPS, PIM/PAM, IAM setup, APIs, ISO 8583 etc
- Understanding of the emerging threat landscape and technologies, and what measures can be taken to protect the information security posture of the organization.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Cyberaws iamcloud platformsapisdata privacygoogle cloud platformamazon web servicesdata protectionGdprDssauditsDevsecopsDPDPdeploymentcloudFirewallCloud SecurityCyber SecurityApplication SecurityArchitecturecomplianceMicrosoft Azure
Section · Company
About National Payments Corporation of India
National Payments Corporation of India
FinTech
1.5k+
employees
2010
16 years old
Mumbai, Maharashtra
US
₹12.2L PA avg
Avg at National Payments Corporation of India
About
Specialised RBI division for digital payments and settlements
Industries
FinTechFinancial ServicesInternet
Employee ratings
10 reviews
3.7/ 5
Culture
3.7
Career growth
3.4
Work-life
3.7
Employees rate it well for
Job Security41Skill Development40
Find them on