Lead - Information Security & SecOps

Lead Information Security & SecOps

Company: Payswiff Technologies
Job Location: Hyderabad
Work Mode: Work From Office (WFO)
Experience: 10–15 Years
Employment Type: Full-Time
Department: Information Security / Cybersecurity

Job Summary

Payswiff Technologies is looking for an experienced Lead – Information Security & SecOps to drive the organization's Information Security strategy, Security Operations, Cybersecurity risk management, infrastructure security, cloud security, and technical security assurance functions.

The role will be responsible for strengthening the overall security posture, managing SIEM/SOAR platforms, driving security automation, overseeing threat detection and incident response, and ensuring effective vulnerability and security risk management.

The ideal candidate should possess strong technical expertise in Security Operations, Cloud Security, Infrastructure Security, SIEM/SOAR, Incident Response, Vulnerability Management, and Security Risk Assessment, along with proven leadership experience in managing technical security teams.

The candidate will work closely with Infrastructure, Cloud, DevOps, Engineering, and GRC teams to implement and maintain effective security controls aligned with PCI DSS, ISO 27001, RBI, and other applicable regulatory requirements.

Key Responsibilities

1. Information Security Strategy & Risk Management

• Drive the organization's Information Security strategy, roadmap, and security improvement initiatives.
• Conduct security posture assessments and identify security gaps.
• Lead technical security risk assessments across infrastructure, cloud, applications, and business systems.
• Define risk mitigation plans, maintain technical risk registers, and track remediation.
• Establish security KPIs, KRIs, and management reporting.

2. Security Operations (SecOps)

• Lead Security Operations, including security monitoring, threat detection, investigation, and incident response.
• Manage and optimize SIEM and SOAR platforms.
• Develop detection rules, correlation logic, security use cases, and alerting mechanisms.
• Establish incident response playbooks and escalation procedures.
• Integrate threat intelligence and drive proactive threat detection.

3. Security Automation

• Drive automation across security monitoring, alert triage, incident response, and vulnerability management.
• Integrate SIEM, SOAR, vulnerability management, and cloud security platforms.
• Automate security reporting, dashboards, and configuration monitoring.
• Identify opportunities to reduce manual effort and improve SecOps efficiency.

4. Vulnerability & Threat Management

• Own the vulnerability management program and ensure periodic security assessments.
• Prioritize vulnerabilities based on severity, exploitability, and business risk.
• Coordinate remediation with Infrastructure, Engineering, DevOps, and Application teams.
• Track vulnerability closure within defined timelines.
• Monitor threat intelligence and emerging cybersecurity threats.

5. Infrastructure & Cloud Security

• Drive security across cloud environments, networks, infrastructure, and endpoints.
• Ensure secure configuration, infrastructure hardening, and security baselines.
• Oversee cloud security posture management and infrastructure security monitoring.
• Strengthen identity security, privileged access management, network security, endpoint protection, encryption, and data protection.
• Work with Infrastructure, Cloud, and DevOps teams to remediate security gaps.

6. Security Architecture & Technical Assurance

• Review security architecture, technical designs, and infrastructure changes.
• Ensure security requirements are incorporated into new systems and technology implementations.
• Define technical security standards and secure configuration guidelines.
• Coordinate with GRC and Compliance teams for technical security control implementation and audit requirements.

7. Technical Third-Party Risk Assessment

• Conduct technical security assessments of vendors and third-party service providers.
• Review vendor infrastructure, cloud security, architecture, penetration test reports, and security certifications.
• Identify technical security gaps and recommend remediation.
• Coordinate with GRC teams for risk governance and documentation.

8. Security Incident Management

• Lead response to major security incidents, including investigation, containment, eradication, and recovery.
• Conduct root cause analysis and post-incident reviews.
• Track corrective actions and preventive measures.
• Coordinate with Management, Legal, Compliance, and relevant stakeholders during security incidents.

9. Team & Stakeholder Management

• Lead and manage SecOps engineers and Information Security professionals.
• Define team objectives, responsibilities, and performance metrics.
• Collaborate with Infrastructure, Cloud, DevOps, Engineering, GRC, and Business teams.
• Present periodic security posture, incident, and risk reports to senior management.
• Drive continuous improvement in technical security capabilities.

Required Skills & Experience

• 10+ years of experience in Information Security, Cybersecurity, Security Operations, and Infrastructure Security.
• Minimum 5 years of experience in a leadership or team management role.
• Strong hands-on experience managing SIEM and SOAR platforms.
• Expertise in Security Operations, Threat Detection, Security Monitoring, and Incident Response.
• Strong experience in Cloud Security and Infrastructure Security.
• Experience in Vulnerability Management, Security Risk Assessment, and Risk Treatment.
• Experience in Security Automation and integration of security tools and platforms.
• Strong knowledge of Network Security, Endpoint Security, IAM, and Privileged Access Management.
• Experience conducting technical third-party security assessments.
• Good understanding of PCI DSS, ISO 27001, and RBI security requirements from a technical security control implementation perspective.
• Proven experience leading and managing technical security teams.
• Excellent stakeholder management, communication, and leadership skills.

Preferred Certifications

• CISSP
• CISM
• CCSP
• CEH
• GIAC Certifications
• Cloud Security Certifications
• SIEM/SOAR Vendor Certifications

Key Performance Indicators (KPIs)

• Improvement in overall Information Security posture.
• Reduction in security incidents and technical security risks.
• Improved SIEM/SOAR effectiveness and security monitoring capabilities.
• Reduction in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Timely vulnerability remediation and closure of security gaps.
• Increased automation across Security Operations.
• Improved infrastructure and cloud security posture.
• Effective technical security risk assessment and treatment.
• Successful implementation and maintenance of security controls.

Key Skills

Information Security, Cybersecurity, Security Operations, SecOps, SIEM, SOAR, Security Automation, Incident Response, Threat Detection, Threat Intelligence, Vulnerability Management, Cloud Security, Infrastructure Security, Security Risk Assessment, Security Architecture, Network Security, Endpoint Security, IAM, PAM, PCI DSS, ISO 27001, RBI Compliance, Third-Party Risk Assessment, Security Monitoring, CISSP, CISM, CCSP.