Information Technology Risk Manager - Cyber Security Domain

We are looking for an experienced IT Risk Manager with strong expertise in Cybersecurity, Vulnerability Management, Application Security, and Regulatory Compliance to join our growing team.

Key Responsibilities :

- Perform Vulnerability Assessment & Penetration Testing (VAPT) across applications, APIs, and infrastructure

- Drive vulnerability remediation and ensure closure within defined SLAs

- Participate in Change Management and conduct secure configuration reviews

- Manage Application & API Security Lifecycle (OWASP Top 10 & API Top 10)

- Conduct threat modeling, risk assessments, and vulnerability scans

- Lead and support security incident response and post-incident analysis

- Ensure compliance with RBI Cybersecurity Framework, ISO 27001, PCI DSS, and NIST standards

- Support audits, regulatory reviews, and security documentation

- Collaborate with Development, DevOps, Infrastructure, and Compliance teams to embed Security by Design principles

Required Skills & Expertise :

- Hands-on experience with VAPT tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, and Postman

- Strong understanding of OWASP Top 10, API Security, and Secure Coding Practices

- Experience conducting secure configuration reviews for firewalls, servers, endpoints, and API gateways

- Knowledge of OAuth 2.0, JWT, API Key Management, Authentication & Authorization mechanisms, and Rate Limiting

- Exposure to DevSecOps practices and security automation

- Experience in Security Incident Response using tools like Splunk and CrowdStrike

Preferred Qualifications :

- Certifications such as CEH or Ethical hacking experience, OSCP, CISSP, CISA, CRISC, Security+, or equivalent will be an advantage

- Experience in Banking, Financial Services, or FinTech environments preferred