Information Systems Security Manager

IDFC FIRST Bank; Navi Mumbai; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

IDFC FIRST Bank is seeking an Information Systems Security Manager in Mumbai to lead cybersecurity programs, governance, and incident response. The role emphasizes risk management, policy enforcement, and team leadership to protect critical banking operations.

You'll oversee security controls, conduct audits, and drive continuous improvement while communicating risks to senior stakeholders and ensuring compliance with policies and SLAs.

Qualifications

• Graduation: BE/B.Tech in any discipline from a recognised institution.
• Post-graduation: ME/M.Tech in any discipline from a recognised institution.
• Minimum 5 years of relevant cybersecurity/IT risk experience, preferably in BFSI/IT-ITES.

Responsibilities

• Oversee device control server infrastructure for high availability and policy enforcement.
• Install, configure, and upgrade security software such as antivirus solutions.
• Conduct regular security audits and risk assessments; identify vulnerabilities and mitigation.
• Govern in-house tools for access and inventory management; ensure secure tooling.
• Lead governance of device control and encryption tools and related processes.
• Administer security controls to manage access to banking application systems.
• Translate cybersecurity insights into risk mitigation plans for business operations.
• Ensure changes comply with SLAs, procedures, and the security matrix.
• Implement business continuity plans to maintain services during breaches/disasters.
• Lead investigations following security incidents and communicate findings to execs.
• Communicate cyber policies effectively across the organization and train teams.
• Continuously monitor for threats and report to executives with mitigation plans.
• Share best practices within the cybersecurity team and drive improvements.

Skills

Cybersecurity infrastructure

Device control

Encryption tools

Audits & risk assessments

Incident investigations

Leadership & mentoring

Executive communication

Education

BE/B.Tech in any discipline

ME/M.Tech in any discipline

Job description

Job Description:

Job Requirements

About the Role

The Information Systems Security Manager will be responsible for managing a comprehensive portfolio of cybersecurity services and implementing strategic initiatives to strengthen the organization’s cyber defence. Based in Mumbai, the role involves overseeing security infrastructure, conducting risk assessments, and ensuring compliance with cybersecurity policies. The role holder will play a key part in minimizing cyber risks through effective governance, process optimization, and team leadership.

Key Responsibilities

Primary Responsibilities

• Supervise the device control server infrastructure, ensuring high availability, policy enforcement, patching, reporting, and logging.
• Install, configure, and upgrade security software such as antivirus programs.
• Conduct regular security audits and risk assessments to identify vulnerabilities and recommend mitigation strategies.
• Manage and govern in-house tools for access and inventory management.
• Oversee the governance of device control and encryption tools, including related products and processes.
• Administer security controls to manage access to the bank’s application systems.
• Translate cybersecurity insights into actionable risk mitigation plans to protect business operations.
• Ensure all service requests and changes comply with SLAs, approved procedures, and the security matrix.
• Implement business continuity plans to maintain uninterrupted service during security breaches or disaster recovery events.
• Lead investigations following security incidents, including impact analysis and recommendations to prevent recurrence.
• Ensure cybersecurity policies and procedures are effectively communicated and enforced across the organization.
• Continuously monitor for cyber threats, attacks, and intrusions.
• Present regular reports to the executive team on cybersecurity status, risks, and mitigation strategies.
• Capture and share best practices within the cybersecurity team.

Secondary Responsibilities

• Collaborate with cybersecurity experts and industry representatives to stay updated on emerging threats, technologies, and prevention techniques.
• Foster a collaborative learning environment that promotes shared responsibility and continuous improvement.
• Build, groom, and retain a high-performing cybersecurity talent pool to drive process efficiency.
• Attract and retain top-tier talent for key roles within the reporting structure.

What We Are Looking For

Education

• Graduation: Full time BE, B. Tech in any discipline from a recognised institution.
• Post-graduation: ME, M. Tech in any discipline from a recognised institution.

Experience

• Minimum of 5 years of relevant experience in cybersecurity, IT risk management, or related fields within BFSI, IT/ITES industry.

Skills and Attributes

• Strong technical expertise in cybersecurity infrastructure, tools, and processes.
• Experience in managing device control, encryption tools, and access management systems.
• Proficiency in conducting audits, risk assessments, and incident investigations.
• Ability to implement and manage business continuity and disaster recovery plans.
• Strong leadership and team development skills.
• Excellent communication and reporting abilities, especially with senior stakeholders.
• Commitment to fostering a culture of security awareness and compliance.
• Strategic thinking with a proactive approach to threat detection and mitigation.