Deputy Manager - Cyber Security Analyst

State Bank of India (SBI); Mumbai; On-site; INR 65,000 - 94,000; Full time

Job summary

State Bank of India invites qualified professionals to join as Specialist Cadre Officers on contract/regular basis. The role focuses on cybersecurity policy development, governance, risk, and compliance, with significant emphasis on regulatory alignment and advocacy across multiple frameworks.

The candidate should have 4+ years of experience in cybersecurity policy, strong policy writing skills, and familiarity with global standards such as ISO 27001, NIST, SOC2, PCI DSS, GDPR/DPDPA.

Qualifications

• B.Tech/ BE in Computer Science/Engineering/CS/IT/EC or equivalent with minimum 50%
• MCA or M.Tech/MSc in CS/IT or equivalent with relevant disciplines
• Minimum 4 years post-qualification experience in Cyber Security/IT Domain
• 2 years in IT Security policy/GRC roles; familiarity with ISO27001/NIST/SOC2/PCI DSS/GDPR/DPDPA
• Certification in cyber policy or related fields (ISO27001/CISSP/CISA/CRISC/CISM/CCSP/GDPR) preferred
• Experience in policy advocacy, dissemination, and writing clear policy documents

Responsibilities

• Develop and maintain comprehensive cybersecurity policies, procedures, and compliance docs.
• Track regulatory changes, prepare briefs and analytical reports for policy decisions.
• Collaborate with technical and non-technical teams to translate cybersecurity concepts into policy guidelines.
• Represent CSCoE in policy discussions, consultations, and forums with government bodies.
• Design training curricula and training materials for policy education and awareness.

Skills

Cybersecurity policy

Policy writing

Governance & compliance

Stakeholder management

Education

B.Tech / BE in CS/IT/EC

MCA

M.Tech / MSc in CS/IT

Eligibility: Govt. recognized degree

Tools

ISO27001 certifications

CISSP/CISA/CRISC/CISM/CCSP

Job description

Recruitment Of Specialist Cadre Officers On Contract/ Regular Basis

(Advertisement No: CRPD/SCO/2026-27/11)

Online Registration Of Application & Payment Of Fees: From 07.08.2026 TO 27.08.2026

State Bank of India invites online applications from eligible Indian citizens for appointment to the Specialist Cadre Officers Posts on Contract/Regular Basis. Candidates are requested to apply online through the link given on Banks official website https://sbi.bank.in/web/careers/current-openings.

The candidates, who intend to apply for the Post(s) are advised to apply only after carefully reading and understanding the undernoted contents of this notification.

Nature of Engagement/Grade: Regular

No. of Vacancies: 2 UR, 1 OBC

Age in years^: (As on 31.07.2026) - 25-35 yrs

Place of Posting: Mumbai or anywhere in India, in case of any administrative requirement.

Annual CTC Upper Range^ - Basic: 64820-2340/1-67160-2680/10-93960 (The official will be eligible for DA, HRA, CCA, PF, Contributory Pension Fund i.e., NPS, LFC, Medical Facility, leave etc. as per rules in force from time to time and Salary and perks as per Banks salary structure)

Details of Educational Qualification/ Certification/ Work Experience/ Specific Skills Required:

Basic Qualification (AS ON 31.07.2026):

Mandatory:

B.Tech/ B.E. in Computer Science/ Computer Science & Engineering/ Software Engineering/ Information Technology/ Electronics/ Electronics & Communications Engineering or Equivalent Degree in above specified disciplines with minimum 50% score.

or

MCA

or

M. Tech/ M. Sc in Computer Science/ Computer Science & Engineering/ Information Technology/ Software Engineering/ Electronics/ Electronics & Communications Engineering or Equivalent Degree in above specified disciplines.

(From a University/ Institution/ Board recognized by Govt. Of India/ approved by Govt. Regulatory Bodies).

Other Certifications (AS ON 31.07.2026):

ISO27001/CISSP/CISA/CRISC/CISM/CCSP/GDPR/ DPDPA/Advanced certifications or postgraduate diplomas in cybersecurity policy / compliance.

Work Experience (Post-Basic Qualification) (AS ON 31.07.2026):

Mandatory:

Minimum Experience: 4 years post-qualification experience in the Cyber Security / Information Technology Domain.

Preferred:

Minimum 2 years post-qualification experience in the IT Security policy / Cyber Security policy development, technical writing, or governance, risk & compliance (GRC) roles. Experience in documenting standards or frameworks like ISO 27001/ NIST/ SOC2/ PCI DSS/ GDPR/DPDPA/ India's NCIIPC/ CERT-In frameworks.

Experience in Policy advocacy and dissemination domains. Excellent verbal and written communication skills.

Training & Teaching experience will not be counted for eligibility.

Note: Candidates are required to produce up-to-date and full Experience Certificate, unambiguously indicating:

(i) Nature of duties,

(ii) Dates and duration of experience,

(iii) Level / position,

(iv) Responsibilities etc. issued by the employer(s).

However, if the candidate is unable to submit an Experience Certificate on the lines indicated above, any document unambiguously indicating the experience, nature of duties and the period claimed may be submitted and it would be considered on merit at the discretion of the Bank and the decision of the Bank shall be final.

Specific Skills:

• Strong analytical and research skills, with the capacity to interpret complex policies and trends.
• Demonstrated ability to build and maintain relationships with key stakeholders and influence policy decisions.
• Team player with strong collaboration and interpersonal skills.
• Organized, methodical, and structured in thinking and writing.
• Ability to present complex information clearly and concisely to diverse audiences.
• This position requires a combination of technical expertise, policy knowledge, and skills to effectively advocate
• Advocacy includes a range of activities such as public awareness campaigns, expert briefs, legislative lobbying, and engaging with policymakers to advocate for specific policy outcomes.
• Hands on experience and skills to control vulnerability and deliver cyber centric policies and strategies adept with latest regulatory and technical of cyber security, to translate them effectively as a policy.
• Creation and implementation of cyber policies.
• Understanding of policy implementation process.

Details Of Brief Job Profile, Role & Responsibilities, Functions & Activities:

Job Profile:

Cybersecurity Analyst will develop, review, and maintain comprehensive cybersecurity policies, procedures, and compliance documentation for public sector and enterprise environments. The Analyst will be a strategic thinker and adept at translating and evidence into actionable policy change. Analyze data and provides evidence based recommendations to inform the development of policies. The role requires the ability to synthesize complex issues and present clear, actionable insights to stakeholders.

Research, drafting, and advocacy initiatives. Track regulatory changes, policy papers, and government consultations relevant to Information Security & Cybersecurity. Prepare briefs, position papers, and analytical reports. Provide policy insights for decision-making and strategy development. Coordinate knowledge-sharing sessions with the Academy program team related to policy.

They research emerging digital security issues, draft policy documents, collaborate with technical and non-technical teams, and ensure compliance with relevant regulations and frameworks. Their work involves bridging the gap between technical realities and policy requirements, translating complex cybersecurity concepts into clear guidelines for various audiences.

KRAs:

On Ground Execution:

• In collaboration with the executive team, design and implement a comprehensive, multi-year advocacy strategy that aligns with the centers mission and goals.
• Monitor and analyze legislative and regulatory developments at the local, state and national levels, providing strategic guidance to the organizations.
• Ensure the centers advocacy work is informed and responsive to the needs of the communities we serve.

Policy Development and Advocacy:

• Oversee the development of high-quality, evidence-based policy materials, including reports, briefs, factsheets, and testimony.
• Design and execute advocacy strategies to influence policy decisions at national, state and local level.
• Engage with government bodies, regulators, industry associations and civil society stakeholders.
• Represent the CSCoE in consultations, forums and working groups.
• Develop and implement a comprehensive engagement strategy with government officials, regulators, and policymakers at the central, state, and local levels.
• Identify and analyze emerging cybersecurity policies and regulations at national and international levels.
• Represent the CSCoE in policy discussions and forums, advocating for the organization's positions and priorities.
• Influencing policy frameworks, involves making submissions and recommendations to government bodies on complex issues like data protection, internet safety, and digital economy regulations.

Risk Assessment and Management:

• Identify and assess potential policy risks and opportunities for the CSCoE.
• Develop and implement strategies to mitigate policy risks and capitalize on opportunities.
• Implement & Monitor policy developments and provide timely updates to the CSCoE leadership.

Internal Collaboration:

• Work closely with other teams within the CSCoE, including research, technical, and training teams, to ensure alignment on policy matters.
• Share knowledge and expertise with other teams to promote a common understanding of cybersecurity policy.

Reporting and Communication:

• Prepare reports and briefings on policy advocacy activities and outcomes.
• Communicate policy developments and their potential impact to internal and external stakeholders.
• The role focuses on translating complex regulations into actionable documents.
• Demonstrate expertise in policy writing, risk assessments and government-aligned standards.
• Collaborate with stakeholders to understand various requirements and produce technical documentation.
• He / She will design training curriculum and create training materials accordingly.
• Staying up to date on the latest cybersecurity threats, technologies and best practices in ever-evolving cybersecurity landscape.

Policy Research & Analysis:

• Conduct in depth research on policies, regulations to the organization or sector.
• Analyze existing policies to identify gaps, inefficiencies and areas for improvement.
• Stay up to date with cyber security, political, economic and social trends that may influence policy.

Develop Policy Recommendations:

• Develop clear, evidence-based policy recommendations based on research findings.
• Researching, analyzing, and drafting new cybersecurity policies and standards related to areas like ransomware, incident response, and vulnerability management.
• Provide actionable, practical suggestions to senior leadership or stakeholders for policy adjustments or new policy initiatives.
• Policy research reports and briefing notes delivered on time.
• High-quality inputs to advocacy papers, regulatory responses.

Policy Monitoring & Evaluation:

• Monitoring the implementation of policies to assess their effectiveness and impact.
• Evaluate and assess the outcomes of policies and make adjustments as necessary.
• Report on the progress of policies and recommend improvements based on real world data.
• Prepare reports, dashboards, and presentations for leadership and policymakers.
• Ensuring the cybersecurity policies adhere to legal requirements and industry frameworks, such as NIST.

Communicate findings:

• Prepare clear and concise reports and presentations to communicate policy analysis and recommendations.
• Represent the organization in policy discussions, conferences and working groups.
• Translating complex cybersecurity concepts into accessible language for both technical and non-technical audiences.

Support Strategic Initiatives:

• Support the creation of long term policy strategies aligned with organizations goals and values.
• Contribute to the development of strategic frameworks for policy change.

Selection Process: The selection will be on the basis of Shortlisting and Interview.

Shortlisting: Mere fulfilling the minimum qualification and experience will not vest any right to candidate for being called for interview. The shortlisting committee constituted by the Bank will decide the shortlisting parameters and thereafter, adequate number of candidates, as decided by the Bank, will be shortlisted for interview. The decision of the Bank to call the candidates for the interview shall be final. No correspondence will be entertained in this regard.

Interview: Interview will carry 100 marks. The qualifying marks in interview will be decided by the Bank. No correspondence will be entertained in this regard.

Merit List: Merit list for selection will be prepared in descending order based on scores obtained in interview only. In case more than one candidate score the cut-off marks (common marks at cut-off point), such candidates will be ranked according to their age in descending order, in the merit list.

Call Letter For Interview: Intimation/call letter for interview will be uploaded on bank's website or sent by email, as decided by the Bank. NO HARD COPY WILL BE SENT.