Practice Lead - Cybersecurity

MVLCO Centre for Banking and FinTech; Pune District; Presencial; INR 2.600.000 - 5.000.000; Jornada completa

Descripción de la vacante

MVLCO Centre for Banking and FinTech is seeking a senior cybersecurity assurance and compliance leader to drive information system audits for banks and financial institutions, including SWIFT CSP independent assessments and TPN/MPA content security evaluations.

You will guide scoping, reporting, and governance while building a high-performing, certified team, strengthening client relationships, and supporting business development across global accounts.

Formación

• Bachelor’s or Master’s degree in computer science, IT, cybersecurity or related discipline.
• At least one of CISA, CISSP, CISM, or ISO/IEC 27001 Lead Auditor / Lead Implementer.
• Preferred: SWIFT CSP Lead Assessor certification.
• 12+ years in cybersecurity, IS audit or related field with 5+ years leading IS audits for banks.
• Experience in RBI-regulated environments and exposure to another international regime.
• Experience delivering SWIFT CSP/CSCF assessments, TPN/MPA assessments and ISO 27001 implementations.

Responsabilidades

• Information Systems (IS) Audit & Regulatory Assurance – Banking & FS.
• SWIFT CSP Independent Assessments.
• TPN/MPA Content Security Assessments.
• ISO/IEC 27001 implementation & certification readiness.
• Business Development, Proposal Management & Pre-Sales.
• Delivery Management, Quality Assurance & Governance.
• Client Relationship & Global Account Management.
• Team Leadership, Development & Capability Building.
• Knowledge Management & Thought Leadership.
• Commercial Management & Operational Effectiveness.

Conocimientos

RBI regulations knowledge

IS audit

Regulatory reporting

Stakeholder management

Team leadership

Report writing & presentation

ISO/IEC 27001 knowledge

Educación

Bachelor’s or Master’s in CS/IT/Cybersecurity

MBA/PG in risk or audit (advantage)

Herramientas

SWIFT CSP

CISA/CISSP/CISM or ISO 27001 Lead Auditor

Descripción del empleo

To lead and grow the cybersecurity assurance and compliance business – Information System audits for banks and financial institutions, SWIFT CSP independent assessments, TPN (MPA) content security assessments and ISO/IEC 27001 implementations – by ensuring high-quality, regulation-aligned delivery, strengthening client relationships, supporting business development and building a certified, high-performing team.

• Vulnerability Assessment & Penetration Testing (VAPT) is handled by a separate dedicated team and is not a core responsibility of this role.
• The role is expected to understand VAPT outputs well enough to use them as evidence in audits and assessments, and to coordinate scoping and consolidated reporting with the VAPT team.

EDUCATIONAL QUALIFICATION & CERTIFICATIONS

• Education: Bachelor’s or master’s degree in computer science, Information Technology, Cybersecurity, Electronics or a related discipline (MBA / PG in risk or audit is an advantage).
• Essential: At least one of CISA, CISSP, CISM, or ISO/IEC 27001 Lead Auditor / Lead Implementer.
• Preferred: SWIFT CSP Certified Assessor (Lead Assessor) – strongly preferred.
• Additional advantage: CRISC, CDPSE, ISO 22301 / 27701 Lead Auditor, PCI DSS (QSA/ISA), CCSP, TPN assessor accreditation or equivalent exposure.

EXPERIENCE

• 12+ years of experience in cybersecurity, IS audit, IT risk and compliance or consulting, with at least 5 years leading IS audits for banks / financial institutions.
• Demonstrated, hands‑on experience in RBI-regulated environments and exposure to at least one other international regulatory regime.
• Experience delivering SWIFT CSP / CSCF assessments; TPN / MPA content security assessments; and multiple end‑to‑end ISO 27001 implementations through certification.
• Proven experience leading teams, reviewing reports, managing senior client stakeholders and supporting proposals/business development.

KEY RESPONSIBILITIES

• Information Systems (IS) Audit & Regulatory Assurance – Banking & Financial Services
• SWIFT Customer Security Programme (CSP) Independent Assessments
• Trusted Partner Network (TPN) / MPA Content Security Assessments
• ISO/IEC 27001 and Other Framework Implementation & Certification Readiness
• Business Development, Proposal Management & Pre-Sales
• Delivery Management, Quality Assurance & Governance
• Client Relationship & Global Account Management
• Team Leadership, Development & Capability Building
• Knowledge Management & Thought Leadership
• Commercial Management & Operational Effectiveness

KEY SKILLS & KNOWLEDGE

• Deep understanding of RBI IT/cyber regulations and IS audit methodology (ISACA ITAF, COBIT), plus awareness of global banking cyber regulations.
• Working knowledge of SWIFT architecture, CSCF controls and assessment practice.
• Familiarity with MPA Content Security Best Practices, TPN+ assessment workflow and media workflow security (site, cloud, application).
• Strong command of ISO/IEC 27001:2022, ISO 27002, risk assessment methods and integrated management systems.
• Technical understanding of network, cloud, identity and access, endpoint, SIEM/SOC, secure SDLC and DR/BCP controls sufficient to challenge evidence.
• Excellent report writing, presentation and negotiation skills; ability to explain risk to Board-level audiences.