Manager - Information Security

Findi India; Mumbai; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Findi India in Mumbai seeks an Information Security Compliance Lead to oversee RBI PSS, PCI DSS, ISO 27001 compliance and regulatory audits. You will coordinate audits, develop security policies, manage vulnerability scans, and drive remediation across IT and business teams. Strong documentation and cross-functional leadership are essential.

Role involves policy creation, incident response coordination, DR/BCP activities, and onboarding of new applications with regulatory compliance in focus.

Qualifications

• Experience implementing RBI PSS, PCI DSS, and ISO 27001 controls.
• Knowledge of regulatory audits and remediation processes.
• Strong documentation and policy development skills.
• Ability to coordinate cross-functional teams and vendors.

Responsibilities

• Lead compliance with RBI PSS, Cyber Resilience/DPSC, C-SITE, PCI DSS and ISO/IEC 27001.
• Coordinate internal, external and regulatory audits and ensure closure of observations.
• Develop and maintain information security & information technology policies, standards, SOPs documentation.
• Manage IVA, IPT, EPT, App PT, FRR, ASV scans, and remediation tracking.
• Initiating periodic activities required under regulatory norms and monitoring them until completion
• Coordinate security incident response, RCA and corrective actions.
• Monitor risk-related advisories and ensure necessary actions are taken by internal stakeholders.
• Collaborate with IT, business teams, auditors and vendors.
• Coordinate internal stakeholders for Disaster Recovery Drill and Business Continuity Plan activity.
• User Access Review of difference applications.
• Ensuring compliance of the new application during onboarding

Skills

Leadership

Communication

Stakeholder Mgmt

Analytical Thinking

Documentation

Problem Solving

Tools

PCI DSS

ISO 27001

RBI PSS

RBI Guidelines

Vulnerability Mgmt

Incident Response

BCP/DR

Patch Mgmt

Job description

Role & responsibilities

• Lead compliance with RBI PSS, Cyber Resilience/DPSC, C-SITE, PCI DSS and ISO/IEC 27001.
• Coordinate internal, external and regulatory audits and ensure closure of observations.
• Develop and maintain information security & information technology policies, standards, SOPs documentation.
• Manage IVA, IPT, EPT, App PT, FRR, ASV scans, and remediation tracking.
• Initiating periodic activities required under regulatory norms and monitoring them until completion
• Coordinate security incident response, RCA and corrective actions.
• Monitor risk-related advisories and ensure necessary actions are taken by internal stakeholders.
• Collaborate with IT, business teams, auditors and vendors.
• Coordinate internal stakeholders for Disaster Recovery Drill and Business Continuity Plan activity.
• User Access Review of difference applications.
• Ensuring compliance of the new application during onboarding

Key Performance Indicators

• Regulatory compliance status
• Timely audit completion
• Audit observation closure within SLA
• Policy review completion
• Critical vulnerability remediation within SLA
• Risk assessment completion
• Incident response SLA adherence
• Security reporting accuracy

Technical Skills

• PCI DSS
• RBI PSS
• Cyber Resilience/DPSC
• ISO 27001
• RBI Cyber Security Guidelines
• Risk Assessment
• Vulnerability Management
• Incident Response
• BCP/DR
• Patch Management
• User Access Reviews
• Firewall Ruleset Reviews

Soft Skills

• Leadership
• Communication
• Stakeholder Management
• Analytical Thinking
• Documentation
• Problem Solving