Information Security Manager

Digamber Finance; Jaipur; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Digamber Capfin Limited seeks a Manager Information Security in Jaipur to establish, implement and continuously strengthen the company’s information security and cyber security framework across LOS, LMS, apps, cloud, networks, and devices.

The role ensures compliance with RBI IT and Cyber Security regulations, CERT-In directions, UIDAI/Aadhaar requirements, data protection laws and other info-sec standards, coordinating with Compliance, Risk, IT, HR and Legal teams.

Qualifications

• BE/BTech/BCA/MCA/ MSc IT or equivalent recognised qualification.
• Certifications in information security such as CISA, CISM, CISSP, CEH, ISO 27001 Lead Auditor/Lead Implementer, CCSP or similar.

Responsibilities

• Information Security Governance and strategy establishment.
• Cyber Security Operations and incident management.
• LOS/LMS and application security oversight.
• Access and identity management.
• Vulnerability management and patching.
• AUA/KUA & UIDAI compliance oversight.
• BYOD and mobile security.
• Data security and DLP implementation.
• Cloud and third-party security controls.
• Business continuity and disaster recovery planning.
• Information security awareness programs.

Education

B.E./B.Tech/BCA/MCA/M.Sc. IT/Computer Science or equivalent recognised qualification

Tools

CISA

CISM

CISSP

CEH

ISO 27001 Lead Auditor/Lead Implementer

CCSP / Cloud Security certification

Relevant cyber-security certification

Job description

JOB DESCRIPTION: MANAGER - INFORMATION SECURITY

Company: Digamber Capfin Limited, NBFC

Department: Information Technology / Information Security

Designation: Manager Information Security

Location: Jaipur

Reporting To: CISO

Functional Coordination: Compliance, Risk Management, Internal Audit, HR, Legal and Business Teams

Role Purpose:

The Manager Information Security shall be responsible for establishing, implementing, monitoring and continuously strengthening the Companys Information Security and Cyber Security framework. The role shall cover the Companys complete technology environment including LOS, LMS, internally developed applications, HRMS, training applications, cloud infrastructure, databases, servers, Active Directory, firewalls, networks, Wi-Fi, laptops/desktops, employee BYOD/mobile devices, APIs, source-code repositories, storage devices, backups and third-party technology services. The incumbent shall also be responsible for coordinating and ensuring compliance with applicable RBI Information Technology and Cyber Security requirements, CERT-In directions, UIDAI/Aadhaar requirements including AUA/KUA or Sub-AUA/Sub-KUA requirements, data protection requirements and other applicable information-security regulations.

Key Responsibilities:

• Information Security Governance
• Cyber Security Operations
• LOS/LMS & Application Security
• Access & Identity Management
• VAPT, Vulnerability & Patch Management
• AUA/KUA & UIDAI Compliance
• BYOD & Mobile Security
• Data Security & DLP
• Security Incident Management & CERT-In
• Cloud & Third-Party Security
• Business Continuity & Disaster Recovery
• Information Security Awareness

Qualification:

B.E./B.Tech/BCA/MCA/M.Sc. IT/Computer Science or equivalent recognised qualification.

Any one or more of:

• CISA
• CISM
• CISSP
• CEH
• ISO 27001 Lead Auditor/Lead Implementer
• CCSP / Cloud Security certification
• Relevant cyber-security certification

Preferred:

5 to 8 years of relevant experience in Information Security/Cyber Security, preferably in:

1) NBFC/Bank/FinTech/BFSI; and/or

2) regulated financial-services technology environment.