Assistant Vice President - Security Governance & Compliance

SBI Card; Gurugram District; On-site; INR 1,500,000 - 2,600,000; Full time

Job summary

SBI Card is seeking a seasoned Information Security Compliance professional to ensure ongoing regulatory alignment with internal and external mandates. The role supports governance programs, collaborates with business, IT, and external auditors, and leads documentation and awareness initiatives across the enterprise.

Key responsibilities include coordinating ISO 27001, PCI DSS, GDPR compliance activities, delivering security training, and tracking action items from audits and assessments to

Qualifications

• Industry-standard certifications such as CISA, CISM, CISSP, ISO 27001, LA/LI.
• Strong knowledge and understanding of enterprise IT Systems, cloud infrastructure and security principles and technologies.

Responsibilities

• Work with business and technical team members, third party vendors and auditors to ensure adherence to all applicable compliance standards (ISO 27001, PCI DSS, GDPR) and communicate with multiple departments and levels of management to resolve technical, operational risks.
• Inform stakeholders about compliance and security-related issues and activities affecting the assigned area or project.
• Reviews, develop and manage documentation/SOPs to ensure adherence with ISO 27001, PCI-DSS, GDPR compliance; coordinates annual ISO 27001, PCI QSA audits & compliance certification with external audit and accreditation agencies.
• Provide periodic and ad hoc security awareness training for employees/contractors to increase visibility of security in their daily job functions; evaluates the effectiveness of training programs and makes recommendations for improvement.
• Track information security actionables of various audits / assessments / committees.

Skills

ISO 27001

PCI DSS

GDPR

CISA

CISM

CISSP

Cloud infrastructure

Education

Bachelor’s Degree in Computer Science or Information Technology

Tools

Cloud infrastructure

Job description

Role Purpose

The role will ensure organization remain up to date on all regulatory and policy requirements in accordance with internal / external mandated regulations. Support SBI Card's Information Security Governance and compliance program.

Role Accountability

• Work with business and technical team members, third party vendors and auditors to ensure adherence to all applicable compliance standards (ISO 27001, PCI DSS, GDPR, etc.) and communicate with multiple departments and levels of management in order to resolve technical, operational risks.
• Inform stakeholders about compliance and security-related issues and activities affecting the assigned area or project.
• Reviews, develop and manage documentation/SOPs to ensure adherence with ISO 27001, PCI-DSS, GDPR compliance; coordinates annual ISO 27001, PCI QSA audits & compliance certification with external audit and accreditation agencies.
• Provide periodic and ad hoc security awareness training for employees/contractors to increase visibility of security in their daily job functions; evaluates the effectiveness of training programs and makes recommendations for improvement.
• Track information security actionables of various audits / assessments / committees.

Measures of Success

• Successful number of adoption and implementation of security projects
• Increase in maturity of Security Programs (Adoption & Capabilities).
• Management of Compliance & Audit related KRAs and metrics on timely basis
• Support audits and assessments conducted by both Internal stakeholders (Internal Audit, Compliance, Risk etc.) and external auditors (Regulator)
• No major or minor observations in audits
• Timely remediation of any findings or recommendations made by any of the internal or external assessors.

Technical Skills / Experience / Certifications

• Industry-standard certifications such as CISA, CISM, CISSP, ISO 27001, LA/LI.
• Strong knowledge and understanding of enterprise IT Systems, cloud infrastructure and security principles and technologies.

Competencies critical to the role

• 'Demonstrate leadership skills achieving stated objectives, coordinating with a diverse set of stakeholders and managing multiple audits and assessments at once.
• Demonstrate ability to continuously coordinate with multiple parties and supervisors while maintaining independence.
• Demonstrate communication skills to address different audiences.
• Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge developments.
• Experience in dealing successfully with different business and external stakeholders.

Qualification:

Bachelor’s Degree in a related area such as Computer Science or Information Technology.

Preferred Industry:

BFSI / NBFC / Telecom