IT Security Manager

Job Responsibilities:

• Lead security operations across paydibs’ cloud environments, payment gateway, merchant portal, APIs, terminal ecosystem and supporting tools.

• Manage security monitoring, alert triage, investigation and incident response using SIEM, WAF, endpoint security, cloud security controls and application/API logs.

• Own vulnerability management: asset visibility, scanning, risk-based prioritisation, remediation tracking, patch compliance and verification of closure.

• Strengthen identity and access management, including MFA, RBAC, privileged-access control, periodic access reviews, joiner/mover/leaver processes and production-access governance.

• Partner with DevSecOps and Engineering to embed secure SDLC practices: code and dependency scanning, secrets management, CI/CD security gates, container/cloud configuration security and penetration-test remediation.

• Review and ensure adherence of SAST and DAST results to governance requirments

• Secure payment data flows and cryptographic services, including tokenisation, HSM/key-management controls, TLS, API authentication, webhook integrity, transaction logging and audit trails.

• Maintain and test incident-response playbooks for security events, payment disruption, account compromise, fraud/abuse, data exposure and third-party incidents.

• Support PCI DSS assessments and continuous compliance activities, ensuring control evidence is accurate and operationally effective.

• Conduct security assessments of critical vendors, cloud services, payment partners and outsourced support providers; validate security requirements before integration or material change.

• Contribute to DR, resilience and recovery exercises for critical payment, authentication, settlement and reconciliation services.

• Deliver practical security awareness for developers, operations teams and business users, with targeted training based on real risks and incidents.

• Provide clear security metrics, vulnerability status, material incidents and remediation updates to the CISO and CTO.

• Operate with a high degree of ownership and autonomy: proactively identify security gaps, emerging threats, control weaknesses and compliance risks; define clear, practical requirements and remediation options; and drive the right stakeholders to timely implementation without waiting for issues to be escalated or assigned.

Job Requirements:

• Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.

• 5–8 years of experience in information security, security operations, or cybersecurity, preferably in fintech or payments.

• Strong knowledge of SIEM, WAF, endpoint security, cloud security, vulnerability management, and incident response.

• Hands-on experience with IAM, MFA, privileged access, SAST, DAST, and secure SDLC practices.

• Understanding of PCI DSS, payment security, cryptography, API security, and key management.

• Experience with penetration testing, remediation tracking, vendor security assessments, and disaster recovery.

• Strong analytical, troubleshooting, and cross-functional collaboration skills.

• Proactive, self-driven, and able to independently identify security risks and drive remediation.

• Relevant certifications such as CISSP, CISM, CEH, Security+, or GIAC are an advantage.