Manager – Data Security

Ujjivan Small Finance Bank Ltd.; Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Benefits offered by this job

Health insurance

Provident fund

Job summary

Ujjivan Small Finance Bank Ltd. is seeking an experienced Data Security Lead to shape and govern the bank’s data protection program.

You will drive discovery, classification, encryption, and monitoring across the data lifecycle, ensuring alignment with RBI, PCI DSS, and DPDPA mandates. You will manage DLP, DAM, key management, masking, and tokenisation, while coordinating audits, risk remediation, and incident response.

Qualifications

• 6–8 years of relevant experience in information security, data security, privacy, database security and related domains.

Responsibilities

• Define and operate the Bank’s data security governance framework across discovery, classification, protection, monitoring, retention and secure disposal.
• Align data security architecture and controls with RBI expectations, PCI DSS requirements and DPDPA obligations.
• Lead the implementation and lifecycle governance of DLP, DAM, encryption, HSM, tokenisation, masking and data-discovery solutions.
• Develop the annual data security roadmap, control-maturity plan and risk-based remediation priorities.
• Maintain data classification standards, sensitive-data inventories, data-flow registers and regulatory control mappings.
• Govern DLP policies, alerts, exceptions, user violations and corrective-action tracking.
• Monitor privileged and abnormal database access through DAM and other security controls.
• Drive encryption, key management, certificate lifecycle, HSM and data-masking governance.
• Monitor PCI DSS controls applicable to cardholder data storage, processing, transmission, logging and access.
• Support privacy-by-design reviews, data minimisation and secure disposal practices.
• Coordinate incident response for data leakage, unauthorised access, privacy breaches and database compromise.
• Support RBI inspections, internal audits, PCI DSS assessments, information security audits and privacy reviews.
• Maintain dashboards and KRIs/KPIs for data leakage, access anomalies, encryption coverage and overdue audit actions.
• Evaluate automation opportunities for data discovery, DLP tuning, database monitoring and evidence collection.
• Coordinate with vendors, OEMs, system integrators and external assessors to strengthen data protection controls.

Skills

DLP

Data discovery

Data classification

Encryption

HSM

Tokenisation

Data masking

Regulatory compliance

Stakeholder management

Education

BE/BTech/BSc/BCA/MCA/MSc IT/Cyber Security or equivalent

Postgraduate in Information Security/Data Protection/Risk Management/Privacy

Tools

PCI DSS

DPDPA

RBI IT governance

CISSP/CISM/CISA/CDPSE/ISO 27001

Job description

• Define and operate the Bank’s data security governance framework across data discovery, classification, protection, monitoring, retention and secure disposal.
• Align data security architecture and controls with RBI expectations, PCI DSS requirements and DPDPA obligations.
• Lead the implementation and lifecycle governance of DLP, Database Activity Monitoring, encryption, HSM, tokenisation, masking and data-discovery solutions.
• Develop the annual data security roadmap, control-maturity plan and risk-based remediation priorities.
• Maintain data classification standards, sensitive-data inventories, data-flow registers and regulatory control mappings.
• Govern DLP policies, alerts, exceptions, user violations and corrective-action tracking.
• Monitor privileged and abnormal database access through DAM and other security controls.
• Drive encryption, key management, certificate lifecycle, HSM and data-masking governance.
• Monitor PCI DSS controls applicable to cardholder data storage, processing, transmission, logging and access.
• Support privacy-by-design reviews, data minimisation and secure disposal practices.
• Coordinate incident response for data leakage, unauthorised access, privacy breaches and database compromise.
• Support RBI inspections, internal audits, PCI DSS assessments, information security audits and privacy reviews.
• Maintain dashboards and KRIs/KPIs for data leakage, access anomalies, encryption coverage and overdue audit actions.
• Evaluate automation opportunities for data discovery, DLP tuning, database monitoring and evidence collection.
• Coordinate with vendors, OEMs, system integrators and external assessors to strengthen data protection controls.

Desired Candidate Profile

• BE, B.Tech., B.Sc., BCA, MCA, M.Sc. IT, Cyber Security or an equivalent qualification.
• Postgraduate qualification in Information Security, Data Protection, Risk Management or Privacy is preferred.
• 6–8 years of relevant experience in information security, data security, privacy, database security, PCI DSS, DLP, encryption, key management or technology risk.
• Prior experience in the BFSI sector would be preferred.
• Strong knowledge of DLP, DAM, data discovery, data classification, encryption, HSM, tokenisation and data masking.
• Practical understanding of PCI DSS, DPDPA, RBI IT governance and privacy-by-design requirements.
• Experience supporting audits, regulatory reviews and data-security investigations.
• Strong analytical, regulatory-interpretation and stakeholder-management capabilities.
• Excellent documentation, written communication and escalation-management skills.
• Preferred certifications include CISSP, CISM, CISA, CDPSE, CIPM/CIPP, CRISC, ISO 27001 Lead Auditor/Implementer, PCI DSS-related certification or cloud security certification.