Cyber Security Specialist

Fintech Cloud; Dadri, Gurugram District; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

Fintech Cloud is seeking a security professional to conduct routine security checks across endpoints, servers, cloud and on-prem environments, and to triage security events. You will coordinate vulnerability management, access controls and incident handling with cross-functional teams in a fintech setting.

The role requires 3–8 years in information security, a CISSP certification or candidacy, and strong knowledge of IAM, network security and cloud security controls.

Qualifications

• 3–8 years of information security, cyber security, security operations, IT risk or security compliance experience.
• Active CISSP certification (candidate status allowed).
• Strong understanding of IAM, network security, vulnerability management and data protection.
• Familiar with SIEM, EDR, vulnerability scanners, and cloud security controls.

Responsibilities

• Perform and document routine security checks across endpoints, servers, cloud/on-prem environments, networks and security tools.
• Review security alerts, SIEM logs, EDR status, and triage anomalies with stakeholders.
• Monitor vulnerabilities, patch status, insecure configs and remediation progress.
• Review access requests and recertification; ensure separation of duties with system owners.
• Support incident handling, evidence preservation and post-incident learning.

Skills

Information security

Cyber security

Security operations

IT risk

Security compliance

IAM

Cloud security

Education

Bachelor's degree in CS/IT/Engineering

CISSP certification (or candidate status)

Tools

SIEM

EDR

Vulnerability scanners

GRC tools

Cloud security consoles

Job description

Role & responsibilities:

• Perform and document routine security checks across endpoints, servers, cloud/on-premises environments, network devices, applications and security tools according to approved runbooks.
• Review security alerts, SIEM logs, endpoint detection and response (EDR), anti-malware status, privileged activity, suspicious authentication events and other indicators; triage and elevate anomalies.
• Monitor vulnerability findings, patch status, insecure configurations, exposed services, certificate expiry, backup/security job exceptions and remediation progress.
• Review user access requests, privileged access, joiner-mover-leaver controls, periodic access recertification and segregation-of-duties exceptions with system owners.
• Support incident handling, evidence preservation, initial impact assessment, incident documentation, lessons learned and tracking of corrective actions.

Security assessments and technical controls

• Coordinate vulnerability assessment and penetration testing (VAPT), configuration reviews, application/API security testing, cloud security reviews and remediation validation.
• Support secure configuration baselines, hardening, encryption, key/certificate management, network segmentation, MFA, endpoint security, data-loss prevention and secure remote access.
• Review changes and new technology deployments for security risks; participate in change-management, architecture and release reviews as assigned.
• Support backup restoration tests, disaster recovery and business continuity exercises, and verify that security requirements are incorporated into recovery plans.
• Work with IT, DevOps, cloud, application, infrastructure and third-party teams to resolve security findings within agreed risk-based timelines.

RBI / CERT-In compliance and audit support

• Maintain a compliance tracker mapping applicable RBI directions, CERT-In directions, internal policies and contractual requirements to controls, owners, evidence and remediation status.
• Support evidence collection for internal audits, external audits, regulatory inspections, risk assessments and control attestations.
• Help maintain incident registers, security logs, asset inventories, risk registers, exceptions, VAPT reports, remediation records and security awareness records.
• Support incident reporting and record-preservation processes in line with applicable CERT-In directions and the organisations incident response procedures.
• Assist with third-party risk assessments, security questionnaires, due diligence, periodic reviews and tracking of vendor remediation commitments.

Required Skills & Experience Must-have

• 3–8 years of relevant information security, cyber security, security operations, IT risk or security compliance experience; fintech, NBFC, banking or payments experience is strongly preferred.
• Active CISSP certification (candidate should provide certification status and validity details).
• Sound understanding of security fundamentals: identity and access management, network security, endpoint protection, vulnerability management, secure configuration, encryption, logging/monitoring, incident response and data protection.
• Practical familiarity with SIEM, EDR/antivirus, vulnerability scanners, ticketing/GRC tools, cloud security consoles and common infrastructure/application security controls.
• Working knowledge of RBI IT/cyber security requirements applicable to the employer’s regulated category and CERT-In incident reporting/log-retention directions.
• Good written and verbal communication; able to explain technical findings to non-technical stakeholders and produce clear evidence-based reports.

• Preferred:
• Hands-on experience with AWS/Azure/GCP security, API security, DevSecOps, container security, DLP, PAM, IAM or security automation.
• Experience supporting ISO 27001, SOC 2, PCI DSS or other relevant security assurance frameworks.
• Relevant degree in computer science, information technology, engineering or a related discipline and certification in Information security.

Success Measures (Illustrative)

• Completion and quality of scheduled security checks and evidence.
• Timely triage and escalation of security events; remediation of vulnerabilities within approved timelines.
• Reduction in overdue high-risk findings and repeat control failures.
• Audit readiness, accurate compliance mapping and effective coordination with technology/control owners.

Reporting / Interfaces:

Reports to: Information Security Manager / CISO / Head of Technology Risk. Works with SOC/MSSP, IT Infrastructure, Applications, Cloud/DevOps, Risk, Compliance, Internal Audit and vendors.