Cyber Security Lead

Reserve Bank Information Technology; Navi Mumbai; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Reserve Bank Information Technology in Navi Mumbai seeks a senior cyber security professional to lead risk assessments of web/mobile/AI platforms, APIs and microservices, ensuring alignment with global standards.

You will review architecture, documents (SRS, HLD/LLD, BCP), identify control gaps, propose compensatory measures, and mentor peers while communicating with stakeholders.

Qualifications

• 7–9 years in cyber security with 5 years in web/mobile/API/AI security risk assessments.
• Deep understanding of ITGC, ISO, NIST CSF, OWASP and BCP standards.
• Knowledge of application, database, API and zero trust architecture.
• Ability to identify risks and propose compensatory controls.
• Excellent written and verbal communication with stakeholders.

Responsibilities

• Perform data flow and architecture reviews to identify threats.
• Review SRS, BCP, HLD and LLD to spot security control gaps.
• Create security assessment checklists for platforms, APIs, AI, microservices.
• Prepare risk reports and track observations for compliance.
• Advise management on critical issues affecting risk posture.
• Communicate effectively with project managers, owners, customers and stakeholders.
• Provide remediation guidance to development teams to close non-compliance.
• Share knowledge and mentor peers to upgrade security practices.

Skills

Threat modelling

Cyber security

Communication skills

Risk assessment

Zero Trust

Security controls

Auditing

Tools

OWASP

NIST CSF

ISO/IEC 27001

BCP

Job description

Role & responsibilities.

• Perform data flow and architecture review of application and identify threats (may use threat modelling)
• Review multiple documents related to application such as SRS, BCP, HLD, LLD and should be able to identify security control gaps as per global standards (OWASP/ ITGC / NIST CSF)
• Prepare platform, COTS, API, AI, Microservices and application security assessment control checklist to be considered and aligned to global standards and industry best practices.
• Prepare risk reports and project tracking for risk observations and compliance.
• Should be able to provide recommendation and compensatory controls to reduce cyber security risk level.
• Communicate effectively with project managers, application owners, customers and stakeholders.
• Advises management of critical issues that may affect the overall project deliverables and risk posture of application.
• Demonstrate skills with upgrading knowledge quickly and transferring it to peers.

Preferred candidate profile.

• A minimum experience of 7 - 9 years in cyber security with relevant of 5 years in web application, mobile application, Artificial intelligence (AI), API, COTS, Platform, Microservices security risk assessment.
• In depth understanding of existing global standards for information / cyber security such as ITGC, ISO, NIST CSF, OWASP and BCP
• Understanding of application, database, API and zero trust architecture
• Holistic risk approach and security control proficiency with respect to people, process and technology aspects
• Good hold and understanding of security practices in application and microservices product development
• Ability to identify cyber security risk and threats based on overall environment,platform of application and third-party vendor security risk.
• Should be proficient in identifying security control implementation gaps in application authentication, authorisation and data security.
• Excellent verbal and written communication skills is mandatory with customer or stakeholder interaction exposure.
• Must be able to articulate risk observation in detail and simple understandable language and explain the security risk observations and reason for severity mapping to customer.
• Should be able to provide solution and remediation for non-compliance observations to development team and support closure.
• Desirable if candidate has experience in auditing roles.