Manager- Information Security - GRC

Multi Commodity Exchange Clearing Corporation; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Multi Commodity Exchange Clearing Corporation is seeking a Compliance & IT Security Lead in Mumbai to oversee regulatory reporting, data privacy, and audit coordination.

You will work with Technology teams to gather data for regulators, manage cyber security audits, and drive adherence to IS policies and ISO standards while improving controls and incident response capabilities.

Qualifications

• Experience in regulatory compliance and audits within financial services.
• Knowledge of IS policies, IT procedures and gap analysis.
• Familiarity with data privacy regimes (DPDPA) and ISO standards.

Responsibilities

• Track compliance requirements and ensure on-time reporting.
• Coordinate with Technology teams to obtain timely data for regulators.
• Manage IT/Technology audits (Cyber Security, ITGC, others).
• Facilitate audits and liaise with auditors for follow-up actions.
• Collaborate with IT Security on Vulnerability, Incident management, Threat intel.
• Ensure adherence to IS Policies/Procedures and identify gaps.
• Prepare compliance resolutions and committee agendas; track ATR.
• Program data privacy initiatives and ISO 27701:2019 compliance.
• Conduct DPIAs and support consent management activities.
• Perform data classification and data flow analysis.
• Train employees on data protection principles.
• Oversee ISO audits (9001, 27001, 22301) and related documentation.
• Track risk acceptance for open points with compensatory controls.
• Know cybersecurity tools like SIEM, PAM, DLP, EDR, DAM, Anti-APT, encryption.
• Evaluate industry best practices and process improvements.

Skills

Regulatory compliance

Audit coordination

IT security awareness

Data privacy

Policy enforcement

Risk assessment

Tools

SIEM

PAM

DLP

EDR

DAM

Data encryption

Job description

• Track compliance / regulatory requirements and ensure on time reporting.
• Maintain circulars, advisories, directions, alerts from SEBI, NCIIPC CERT-In, track required remediations and timely submission of compliance status
• Coordinating with various Technology teams for receipt of timely data/ information to various regulatory authorities.
• Managing IT/ Technology audits like Cyber Security, System & Network, IT General Controls Audit, and other Technology Compliances etc
• Facilitate audits, coordinating with various Internal and External Stakeholders for audit related data. Liaising with auditors for any follow-up actions etc.
• Working closely with IT Security team on key areas like Vulnerability Management, Incident Management, Threat intelligence.
• Ensuring adherence towards IS Policies/ IT Procedures and identification of gaps if any.
• Preparation of compliance resolution and committee agendas and track ATR
• Program management for data privacy, DPDPA, ISO 27701:2019 compliance
• Conduct gap assessment and implement tools and technologies and processes for compliance to DPDPA requirements
• Define and develop data protection policies and procedures within the organization.
• Perform Data Classification and Data Flow Analysis to understand data life cycle
• Conduct Data Privacy Impact Assessments and support consent management activities Serve as point of contact for internal stakeholders regarding data protection issues.
• Conduct training and awareness programs for employees on data protection principles and practices. Job Description - For office use only HR Internal MCXCCL
• Managing ISO 9001, ISO 27001 and ISO 22301 Internal and External audits, along with preparedness and review of the relevant documentation.
• Managing & tracking risk acceptance for open points based on compensatory controls
• Knowledge on Cybersecurity tools like SIEM, PAM, DLP, EDR, DAM, Anti-APT, Data encryption technologies etc.
• Evaluating the best industry practice followed and identify the various process improvements.