Digital Banking Security Officer

Confidential; India; On-site; INR 4,500,000 - 7,500,000; Full time

Benefits offered by this job

Relocation support

Job summary

Confidential banking organization is seeking a senior cybersecurity leader to define security direction for digital products including mobile and internet banking. You will collaborate with development and digital banking teams and report security posture to senior management.

This is a confidential search; employer and country will be shared with shortlisted candidates. Key responsibilities include leading security assessments, risk governance, and ensuring secure design across the SDLC, with

Qualifications

• 7–10 years in cybersecurity, including 3+ years in banking/financial services
• At least 3 years in a leadership or management role
• Proven experience in application, API, and mobile security
• Strong knowledge of OWASP, secure SDLC, PCI DSS, ISO 27001, and banking regulatory frameworks
• Experience managing vulnerability assessment and remediation programs
• Ability to influence engineering and business stakeholders at all levels
• Willingness to relocate internationally and work fully on-site

Responsibilities

• Lead security assessments of mobile banking, internet banking, APIs, and digital services
• Review vulnerability and penetration testing reports, prioritize risks, and drive remediation to closure
• Ensure secure authentication, authorization, encryption, and session management
• Embed secure-by-design principles with development and digital banking teams across the SDLC
• Define and maintain application security standards, policies, and secure coding guidelines
• Conduct security risk assessments for new products, third-party integrations, and fintech partnerships
• Report security posture, key risks, and metrics to senior management
• Support detection, investigation, and response for application-level incidents and fraud-related attacks
• Work with the SOC on threat intelligence, monitoring use cases, and post-incident reviews
• Strengthen defenses against account takeover, API abuse, mobile malware, and social engineering

Skills

Cybersecurity leadership

Application security

API security

Mobile security

VAPT programs

Regulatory compliance

Stakeholder influence

Job description

A leading banking organization is searching for a senior cybersecurity leader to secure its mobile banking, internet banking, and digital platforms. You will set the security direction for digital products, work closely with development and digital banking teams, and report on the bank’s security posture to senior management. This is a confidential search, so the employer and country will be shared with shortlisted candidates.

Key responsibilities

Application & Digital Banking Security

• Lead security assessments of mobile banking, internet banking, APIs, and digital services
• Review vulnerability and penetration testing reports, prioritize risks, and drive remediation to closure
• Ensure secure authentication, authorization, encryption, and session management
• Embed secure-by-design principles with development and digital banking teams across the SDLC

Security Governance & Risk

• Define and maintain application security standards, policies, and secure coding guidelines
• Conduct security risk assessments for new products, third-party integrations, and fintech partnerships
• Ensure compliance with PCI DSS, ISO 27001, and local central bank and regulatory requirements
• Report security posture, key risks, and metrics to senior management
• Support detection, investigation, and response for application-level incidents and fraud-related attacks
• Work with the SOC on threat intelligence, monitoring use cases, and post-incident reviews
• Strengthen defenses against account takeover, API abuse, mobile malware, and social engineering

Requirements

• 7 to 10 years in cybersecurity, including at least 3 years in banking or financial services
• At least 3 years in a leadership or team management role
• Proven experience in application, API, and mobile security
• Strong knowledge of OWASP, secure SDLC, PCI DSS, ISO 27001, and banking regulatory frameworks
• Experience managing VAPT programs and vulnerability remediation
• Ability to influence engineering and business stakeholders at all levels
• Willingness to relocate internationally and work fully on-site

Preferred qualifications

• CISSP, CISM, or CISA
• OSCP or CEH

What we offer

• Relocation support (to be detailed with shortlisted candidates)