Information Security Manager

Role & responsibilities

• Develop and maintain the technology and information security risk management frameworks, policies, and standards, in alignment with the RBI regulations and the company's business objectives and risk appetite.
• Establish and oversee the technology and information security risk governance structure, processes, and committees, ensuring effective coordination and communication among the relevant stakeholders.
• Conduct and facilitate regular technology and information security risk assessments, audits, and reviews, identifying and evaluating the current and emerging risks, and recommending appropriate mitigation strategies and action plans.
• Monitor and report on the technology and information security risk profile, performance, and compliance, using relevant metrics, indicators, and dashboards, and escalating any issues or incidents to senior management and regulators as required.
• Provide guidance and support to the business units and functions on the implementation and adherence of the technology and information security risk management frameworks, policies, and standards, as well as the resolution of any risk issues or gaps.
• Take active part in operational security with his/her technical skills
• Contribute to the Information Security Awareness program through workshops and simulation activities
• Manage and develop the technology and information security risk governance team, ensuring adequate resources, skills, and competencies.
• Keep abreast of the latest developments and trends in technology and information security risk management and provide thought leadership and best practices to the organization.

Preferred candidate profile

• Audit Experience in ISO and ITGC
• Experience in DLP and Endpoint Detection & Response