Senior Information Security Manager

Synclature; Hinoba-an; On-site; PHP 1,020,000 - 1,700,000; Full time

Job summary

Synclature is seeking an experienced information security leader to drive the company’s security strategy in a fintech context. You will govern ISMS, align with RBI/IRDAI/ISO 27001 standards, and oversee cloud security, IAM/PAM, and incident response.

You will manage an 8-person security team, coordinate cross-functionally with IT, Legal, Risk, and Compliance, and lead cyber risk assessments, DR planning, and vendor risk control in a dynamic environment.

Qualifications

• Minimum 8 years in information security with leadership experience.
• Experience with regulatory compliance and security frameworks.
• Hands-on with ISO 27001, NIST COBIT or similar.

Responsibilities

• Define and execute an information security strategy aligned to objectives and regulatory requirements (RBI, IT Framework, Outsourcing Guidelines, IRDAI CS).
• Lead governance bodies (ISC, CAB); report to Board, Risk Management, IT Steering Committees.
• Develop and enforce ISMS, ISO 27001:2022 implementation and maintenance; oversee controls.
• Conduct cyber risk assessments, BIA, risk treatment, monitoring and mitigation.
• Manage third-party/vendor risk and ensure proper oversight.
• Protect customer data and PII with encryption, data classification and DLP.
• Design and manage security architecture, SOC, IAM, PAM; implement vulnerability management and network security.
• Review change requests via CAB and advise security recommendations.
• Lead cloud security for AWS/Azure and secure API integrations with partners.
• Manage incident response, crisis management, and BCP/DR; coordinate forensics as needed.
• Lead an information security team of 8; manage vendor relationships.
• Drive cross-functional collaboration; embed security in IT, Legal, Risk, Compliance, Business.
• Oversee security awareness programs including phishing simulations.

Skills

Security Strategy

RBI Compliance

IRDAI Compliance

ISO 27001

Governance

Risk Assessment

Incident Response

SOC

IAM

PAM

Cloud Security

API Security

Tools

SIEM

DLP

Endpoint Security

Job description

This role will drive the overall security strategy, ensure compliance with RBI, IRDAI, and ISO 27001 standards, and oversee governance, risk assessments, and incident response. The ideal candidate will manage a skilled InfoSec team, lead security architecture and operations, and foster a strong security culture across the organization.They will also play a key role in securing cloud infrastructure, APIs, and third-party integrations in a dynamic fintech environment.

Job Responsibilities:

• Define and execute an information security strategy aligned with business objectives and regulatory requirements, including RBI Master Directions, IT Framework, Outsourcing Guidelines, and IRDAI IS CS Guidelines.
• Lead/support security governance bodies such as the Information Security Committee (ISC) and Change Advisory Board (CAB); report to Board, Risk Management, and IT Steering Committees.
• Develop, update, and enforce comprehensive information security policies, procedures, and frameworks (ISMS), including ISO 27001:2022 implementation and maintenance.Oversee implementation of security controls across people, processes, and technology; drive continuous improvement in security posture.
• Conduct cyber risk assessments, business impact analysis (BIA), and implement risk treatment, monitoring, and mitigation strategies.
• Manage third-party/vendor risks, ensuring proper controls and oversight are in place.
• Ensure customer data and personally identifiable information (PII) is protected through data classification, encryption (at rest/in transit), and data loss prevention (DLP) solutions.
• Design, oversee and manage security architecture, tools, and operations, including Security Operations Centre (SOC), Identity & Access Management (IAM), Privileged Access Management (PAM), vulnerability assessments, and network security (firewalls, VPN, IPSec).
• Review and provide security recommendations on all change requests via CAB.
• Implement and oversee cloud security strategies for AWS/Azure environments and ensure secure integration of APIs with lending and fintech partners.
• Lead incident response, crisis management, and business continuity/disaster recovery (BCP/DR) plans; coordinate digital forensics and legal/law enforcement engagement when required.
• Lead and develop an information security team of 8 members; manage vendor relationships and build internal capabilities.
• Drive cross-functional collaboration across IT, Legal, Risk, Compliance, and Business teams to embed security in all functions. Liaise with IT infrastructure teams for alignment with information security objectives.
• Oversee and run enterprise-wide security awareness initiatives, including phishing simulations and tailored role-based training programs.

Experience Requirements:

• Minimum 8 years of experience in information technology and security with some experience in managerial/leadership roles
• Experience with regulatory compliance
• Hands-on experience with security frameworks

Technical Skills:

• Security Frameworks: ISO 27001, NIST Cybersecurity Framework, COBIT
• Security Technologies: SIEM, DLP, IAM, PAM, Vulnerability Management, Endpoint Security
• Cloud Security: AWS/Azure security, DevSecOps practices
• Regulatory Knowledge: RBI IT Framework, Outsourcing Guidelines, Data Protection norms

Budget: 15-25 LPA

How to Apply

Send your resume to [e-mail] and mention the role in your subject line. Our team reviews every application and will get back to you.