Information Security Manager

ECL Finance Limited; Mumbai; Vor Ort; INR 1.800.000 - 3.400.000; Vollzeit

Zusammenfassung

ECL Finance Limited in Mumbai is seeking an Information Security Manager to lead the enterprise ISMS and cyber risk program, aligning security with business goals and regulatory requirements. You will steer policies, incident response, and vendor security management while driving secure AI adoption.

Ideal candidates hold a Master’s in tech, with CISSP/CISA/CISM certifications and 5–7 years in large organizations, including governance, risk, and security operations.

Qualifikationen

• Master’s degree in technology/science/computer applications.
• CISSP or CISA and CISM certifications are required.
• 5–7 years of IT and cybersecurity experience in large organizations.

Aufgaben

• Develop, implement, and maintain ISMS and cyber risk framework.
• Define cyber security strategy, policies, standards, and procedures.
• Lead risk assessments and risk mitigation across the enterprise.
• Oversee security operations, SOC, SIEM, and cloud security controls.
• Ensure regulatory compliance with RBI, data privacy, ISO27001, NIST, PCI-DSS.
• Establish AI governance, secure software development, and DevSecOps.
• Engage with regulators, auditors, and senior management on security matters.

Kenntnisse

Information Security

Cyber Risk Management

AI Governance

Leadership

Regulatory Compliance

Ausbildung

Master’s in Technology/Science/CA

CISSP/CISA and CISM Certified

Jobbeschreibung

The Information Security Manager will be responsible for establishing, implementing, and maintaining the organization's information security, cyber risk management, data protection, and AI governance framework. The role will ensure the confidentiality, integrity, and availability of information assets while aligning security initiatives with business objectives, regulatory requirements, and emerging technology risks.

Qualifications & Experience

Experience: 5–7 years

· Master’s in technology/science/computer application. CISSP/CISA and CISM Certified. 5 to 7 years’ experience in IT and Cyber Security with large organization.

Key Responsibilities

Information Security & Cyber Risk Management

· Develop, implement, and continuously enhance the enterprise-wide Information Security Management System (ISMS).

· Define and execute the organization's cyber security strategy, roadmap, policies, standards, and procedures.

· Lead enterprise risk assessments and establish appropriate risk mitigation measures.

· Ensure protection of critical business applications, customer data, digital channels, and infrastructure.

· Oversee security monitoring, vulnerability management, penetration testing, threat intelligence, and incident response programs.

· Manage cyber security operations, including SOC, SIEM, endpoint protection, and cloud security controls.

Regulatory & Compliance

· Ensure compliance with RBI Cyber Security Framework, Digital Lending Guidelines, Data Privacy

Regulations, and other applicable regulatory requirements.

· Drive compliance with ISO 27001, NIST, PCI-DSS, and other relevant security frameworks.

· Coordinate internal and external security audits and address observations within agreed timelines.

· Present cyber risk posture, security incidents, and compliance status to senior management and Board/IT Committee.

· Provide security oversight for application development, cloud platforms, infrastructure, and third-party integrations.

· Review and approve technology architecture from an information security perspective.

· Establish secure software development and DevSecOps practices.

· Oversee vendor risk assessments and third-party security management.

AI Security & Governance

· Develop and implement an AI Governance Framework covering responsible AI usage, security, privacy, and compliance.

· Partner with business and technology teams to securely adopt AI solutions while maintaining regulatory compliance.

· Monitor emerging AI security trends, threats, and regulatory developments.

Leadership & Stakeholder Management

· Work closely with business leaders to embed security into organizational processes.

· Conduct security awareness and cyber resilience programs across the organization.

· Build and lead a high-performing information security team.

· Engage with regulators, auditors, technology partners, and industry forums on security matters.

Information Security Governance

Cloud & Infrastructure Security

Security Operations & Incident Response