Assistant Vice President - Security Governance and Compliance

SBI Payment Services Pvt. Ltd.; Gurugram District; Presencial; INR 3.500.000 - 5.500.000; Jornada completa

Descripción de la vacante

SBI Card seeks an Executive level professional to lead security governance and compliance initiatives. The role ensures adherence to ISO 27001, PCI DSS and GDPR, coordinating with multiple teams and external auditors.

The candidate should hold industry certifications such as CISA, CISM, CISSP and a Bachelor’s Degree in CS or IT, to drive audits and security awareness across the organization.

Formación

• Industry certifications in information security and governance.
• Knowledge of security frameworks and auditing practices.

Responsabilidades

• Support SBI Card's Information Security Governance and compliance program.
• Coordinate with business, technical teams, vendors, and auditors to ensure adherence to ISO 27001, PCI DSS, GDPR.
• Communicate security risks to stakeholders and drive remediation actions.
• Coordinate annual ISO 27001 and PCI audits and certifications with external bodies.

Conocimientos

CISA

CISM

CISSP

ISO 27001

LA/LI

Educación

Bachelor’s Degree in Computer Science or Information Technology

Descripción del empleo

Assistant Vice President - Security Governance & Compliance

SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone. SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, color, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work. Join us to shape the future of digital payment in India and unlock your full potential.

What’s in it for YOU

SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees. Admirable work deserves to be rewarded. We have a well curated bouquet of rewards and recognition program for the employees.

Dynamic, Inclusive and Diverse team culture

Gender Neutral Policy Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits Commitment to the overall development of an employee through comprehensive learning & development framework Role Purpose The role will ensure organization remain up-to-date on all regulatory and policy requirements in accordance with internal / external mandated regulations.

Role Purpose

Support SBI Card's Information Security Governance and compliance program.

Role Accountability

Work with business and technical team members, third party vendors and auditors to ensure adherence to all applicable compliance standards (ISO 27001, PCI DSS, GDPR, etc) and communicates with multiple departments and levels of management in order to resolve technical, operational risks. Informs stakeholders about compliance and security-related issues and activities affecting the assigned area or project. Reviews, develops and manage documentation/SOPs to ensure adherence with ISO 27001, PCI-DSS, GDPR compliance; coordinates annual ISO 27001, PCI QSA audits & compliance certification with external audit and accreditation agencies. Provide periodic and adhoc security awareness training for employees/contractors to increase visibility of security in their daily job functions; evaluates the effectiveness of training programs and makes recommendations for improvement. Track information security actionables of various audits / assessments / commitees.

Measures of Success

Successful number of adoption and implementation of security projects Increase in maturity of Security Programs (Adoption & Capabilities). Management of Cpmpliance & Audit related KRAs and metrics on timely basis Support audits and assessments conducted by both Internal stakeholders (Internal Audit, Compliance, Risk etc.) and external auditors (Regulator) No major or minor observations in audits Timely remidiation of any findings or recommendations made by any of the internal or external assesors

Technical Skills / Experience / Certifications

Industry-standard certifications such as CISA, CISM, CISSP, ISO 27001, LA/LI. Strong knowledge and understanding of enterprise IT Systems, cloud infrastructure and security principles and technologies.

Competencies critical to the role

'Demonstrate leadership skills achieving stated objectives, coordinating with a diverse set of stakeholders and managing multiple audits and assessments at once. Demonstrate ability to continuously coordinate with multiple parties and supervisors while maintaining independence. Demonstrate communication skills to address different audiences. Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge developments. Experience in dealing successfully with different business and external stakeholders.

Qualification

Bachelor’s Degree in a related area such as Computer Science or Information Technology.

Preferred Industry

BFSI / NBFC / Telecom

Experience Level

Executive Level