Job description

POSITION: Deputy Manager - Information Security

Reports to (Position): VP/AVO Information Security

Develop, implement, and maintain the GRC framework for information security.
Conduct regular audits to assess the effectiveness of security controls and compliance with regulations and internal policies.
Collaborate with internal stakeholders to identify and mitigate information security risks.
Ensure compliance with relevant regulatory requirements, laws: including data protection laws and industry standards.
Prepare detailed audit reports and present findings to senior management, along with remediation recommendations.
Monitor changes in regulations and industry standards to ensure ongoing compliance.
Facilitate training and awareness programs for employees on security policies and regulatory requirements.
Work closely with IT and other departments to ensure integration of security controls into business processes.

Strong understanding of Information security and control frameworks (e.g., ISO 27001/27002, COBIT, NIST).
Knowledge of regulatory requirements specific to the financial services sector, including SEBI, DPDPA, etc.
Excellent analytical skills and attention to detail for conducting audits and assessments.
Strong communication and interpersonal skills to effectively convey compliance requirements.
Ability to work independently and collaboratively in a cross-functional environment.
Proficiency in GRC tools and audit methodologies.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Someone shared one job with you. ASAI keeps finding the rest.

Scored, not searched. Every role ranked against your actual profile.

Alerts as often as hourly. Reach new roles while the pile is still small.

Skill gaps, spelled out. See exactly which requirements you don't meet yet.

Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Job description

Develop, implement, and maintain the GRC framework for information security.
Conduct regular audits to assess the effectiveness of security controls and compliance with regulations and internal policies.
Collaborate with internal stakeholders to identify and mitigate information security risks.
Ensure compliance with relevant regulatory requirements, laws: including data protection laws and industry standards.
Prepare detailed audit reports and present findings to senior management, along with remediation recommendations.
Monitor changes in regulations and industry standards to ensure ongoing compliance.
Facilitate training and awareness programs for employees on security policies and regulatory requirements.
Work closely with IT and other departments to ensure integration of security controls into business processes.

Strong understanding of Information security and control frameworks (e.g., ISO 27001/27002, COBIT, NIST).
Knowledge of regulatory requirements specific to the financial services sector, including SEBI, DPDPA, etc.
Excellent analytical skills and attention to detail for conducting audits and assessments.
Strong communication and interpersonal skills to effectively convey compliance requirements.
Ability to work independently and collaboratively in a cross-functional environment.
Proficiency in GRC tools and audit methodologies.