Senior Executive Information Security

SBI Payment Services Pvt. Ltd.; Mumbai City; On-site; INR 600,000 - 900,000; Full time

Job summary

SBI Payment Services Pvt. Ltd.

in Mumbai seeks a Senior Executive Information Security to safeguard information assets, ensure regulatory compliance, and manage day-to-day security operations including SIEM, vulnerability management, and incident response. The role requires a B.Tech in CS/IT or Cybersecurity, preferred CISSP/CEH/CompTIA Security+ certifications, and the ability to collaborate with IT, legal, and business teams to strengthen security controls across cloud, networks, and

Qualifications

• Bachelor’s degree in computer science, information technology or cybersecurity required.
• Preferred certifications CISSP, CEH or CompTIA Security+.
• 0–2 years in information security or IT security operations.

Responsibilities

• Monitor and respond to security incidents, vulnerabilities and threats.
• Manage SIEM, IDS/IPS, endpoint protection and DLP solutions.
• Coordinate incident response and forensic investigations.
• Perform internal VAPT on network, mobile, cloud and web apps.
• Support risk assessments and security controls for AI/ML workloads.
• Assist with DevSecOps activities and SDLC security assessments.

Skills

Network security

Endpoint security

Application security

Cloud security

SIEM

IAM

DLP

Vulnerability scanners

Firewalls

DevSecOps

Threat modelling

Incident response

Education

B.Tech in CS/IT or Cybersecurity

Tools

CISSP

CEH

CompTIA Security+

Job description

Position

Senior Executive Information Security

Grade - Senior Executive

Reporting to Manager – Information Security

Location Mumbai

About the Company

SBI Payment Services Pvt. Ltd. is a Joint Venture between SBI & Hitachi Payment Services Pvt. Ltd. which combines the unparalleled distribution network, customer trust of SBI with cutting edge technology and services of the Hitachi Group. SBI Payments has been in acquiring business since 2010 and currently has over 33 lakh merchant payment acceptance touch points and processes transaction value of over Rs.1 lakh Crore per annum. The Company envisages to be the market leader in digital payments acceptance solutions to merchants in India as well as in Asia.

Qualification

Bachelor’s degree: (B. Tech) degree in computer science, Information Technology, or Cybersecurity.

Preferred Certification: CISSP, CEH, CompTIA Security+ or equivalent.

Experience

0-2 years of experience in Information Security or IT Security Operations.

Domain Knowledge Competencies

Technical Competencies:

• Strong knowledge of network security, endpoint security, Application Security.
• Understanding of Cloud Security and Cloud Security Posture Management.
• Familiarity with SIEM, IAM, DLP, vulnerability scanners, and firewalls.
• Understanding of secure software development lifecycle (SDLC)and DevSecOps practices.
• Vulnerability Assessment Process, Penetration Testing Techniques & Mobile Security Testing Strong
• Understanding of Enterprise AI/ML Security and AI Risk Management.

Regulatory & Compliance Competencies:

• Knowledge of ISO 27001, PCI-DSS, SOC 2, RBI, DPDPA and local data protection laws.
• Experience in audit preparation and compliance reporting.

Risk Management Competencies:

• Ability to conduct risk assessments and business impact analyses.
• Knowledge of threat modelling and incident response frameworks.

Position Objective / Responsibilities

Position Objective:

Senior Executive – InfoSec will support the organization in safeguarding its information assets, ensuring compliance with regulatory frameworks, and mitigating cybersecurity risks. The role focuses on managing day-to-day security operations, implementing security policies, and providing domain-specific expertise to strengthen the organization’s overall security posture.

Key Responsibilities:

• Security Operations
• Monitor and respond to security incidents, vulnerabilities and threats.
• Manage SIEM, IDS/IPS, endpoint protection, and DLP solutions.
• Coordinate incident response and forensic investigations.
• Perform Internal VAPT on Network, Mobile, Cloud and Web Applications.
• Perform Security and Risk Assessments on Enterprise AI/ML Workloads and implement Security Controls.
• Conducting DevSecOps Activity and performing SDLC Security Assessments.
• Governance, Risk & Compliance (GRC)
• Ensure adherence to ISO 27001, NIST, PCI-DSS, DPDPA,RBI or industry-specific standards.
• Conduct risk assessments and internal audits.
• Support regulatory inspections and compliance reporting.
• Understanding of cloud security posture management & cloud audit.
• Policy & Awareness
• Draft, update, and enforce information security policies and procedures.
• Conduct employee awareness and training programs on cybersecurity best practices.
• Collaboration & Leadership
• Work with IT, legal, and business teams to align security with organizational goals.
• Report security metrics and incidents to senior management.
• Project Support:
• Review new applications, systems, and infrastructure for security risks.
• Conduct vendor risk assessments and third-party security reviews.

Behavioural Competencies

• A high level of commitment and self-motivation.
• Proven work experience in handling the portfolio.
• Strong integrity, trustworthiness and accountability
• Excellent written and verbal communication skills.