Security Strategy Manager
Role Overview & Ownership Areas We are seeking a highly experienced and strategic Security Strategy Manager to lead our information security initiatives across the organization.
The ideal candidate will have a proven track record in designing, implementing, and managing security frameworks, risk management protocols, and compliance standards in the financial services domain, preferably within an NBFC or BFSI environment
Key Responsibility Areas Strategic Leadership:
• Develop, lead, and support executing the companys information security strategy in alignment with business objectives and regulatory requirements. • Contact market research, and analyse industry best practices and competitive benchmarks to define long-term security goals and roadmaps. Work closely with the CISO to ensure proactive risk mitigation and effective threat management. Regulatory Compliance: • Ensure compliance with RBI guidelines, ISO 27001, DPDP and other applicable regulatory standards. • Work closely with compliance and legal teams during audits, inspections, and incident response. Incident Management: • Oversee incident response planning, readiness, and investigation. • Lead root cause analysis and continuous improvement processes after security incidents. Stakeholder Engagement: • Collaborate with senior leadership, IT, operations, and third parties to ensure holistic security integration. • Serve as a subject matter expert and advisor on security implications for strategic projects and acquisitions. Technology Oversight: • Evaluate and recommend security technologies, tools, and architectural solutions based on market research and the organization’s identified threat landscape to strengthen overall security posture. • Provide guidance to the team on implementing the most effective and appropriate security tools, ensuring alignment with industry best practices.
Qualifications Education: • Any degree in Information Security, Cybersecurity, IT Risk Management or a related field (Master degree preferred). Experience: • 15+ years of experience in cybersecurity, including security architecture, cloud security, and infrastructure security. • Strong understanding of NBFC regulatory landscape and financial cybersecurity threats. • Excellent knowledge of security architecture, risk assessment methodologies, and compliance management.
Technical Skills: • Experience with various security solutions and integration • Certifications such as CISSP, CISM, CISA, CRISC, or equivalent is highly desirable. • Familiarity with cloud security risks and supply chain security. Key Competencies • Strong communications skills and ability to complex security. • Problem solving abilities and ability to work under pressure, Strong project management skills • Familiarity with cloud security and digital transformation security planning