Senior Resource- Information Security

NB: "Recruiting for a scheduled commercial bank"
Job Title: Senior Resource – Information Security
Minimum 15 years in BFSI
Employment Type: Full-Time
Location – Thrissur
Job Summary:
We are looking for a highly skilled Deputy CISO – Information Security with at least 10 years of experience in BFSI to lead risk management, compliance, and security operations. The ideal candidate should have hands-on experience in designing and implementing banking security architecture, DC/DR, network security, and ensuring compliance with RBI, SEBI, UIDAI, and other regulatory bodies. Key Responsibilities:
• Develop & enforce security policies, procedures, and frameworks (NIST, ISO 27001, PCI DSS).
• Ensure regulatory compliance with RBI, SEBI, UIDAI, NPCI, ITGC, and risk management frameworks.
• Provide strategic direction and leadership in the planning, development, and implementation of enterprise-wide cybersecurity initiatives.
• Oversee the identification, assessment, and mitigation of cybersecurity risks, ensuring compliance with industry standards and regulations.
• Collaborate with cross-functional teams, including engineering, to integrate cybersecurity best practices into the design and implementation of new technologies and systems. • Lead and manage a team of cybersecurity professionals, providing mentorship, guidance, and support to enhance the overall security posture of the organization.
• Conduct regular security assessments, audits, and penetration testing to identify vulnerabilities and weaknesses in the organization’s IT and OT infrastructure.
• Communicate effectively with senior management, board members, and other stakeholders to report on the organization’s cybersecurity posture, initiatives, and ongoing risk management efforts.
• Ensure compliance with relevant cybersecurity standards, regulations, and industry best practices, and participate in audits and compliance assessments as require
• Lead regulatory audits and collaborate with internal/external stakeholders.
• Conduct cyber drills to assess and improve incident response capabilities.
• Manage SIEM, DLP, XDR, SOC operations, and threat intelligence.
• Oversee DC/DR design & implementation, network & security architecture for banking systems.
• Ensure security of OS, applications, APIs, ATM/CARD, switch, BBPS, CBS, mobile apps, cloud security, DC/DR controls.
• Lead VA/PT (OWASP), third-party/vendor security audits, and risk assessments.
• Conduct security awareness programs and training for teams.
• Mentor and manage a team of 6-10 cybersecurity professionals, fostering a security-first culture
• Ensure compliance with SOC 2 audits and RBI regulations, particularly in the financial sector.
• Manage Governance, Risk, and compliance (GRC) processes and tools.
• Implement and manage Information Security Management System (ISMS) aligned with ISO 27001/27002 standards.
Education:
BTech/MCA/MTech in Computer Science, IT or related field.
Certifications (Preferred):
ISO 27001 LA/LI, ISO 31000, CISA, CISM, CISSP, ITIL.
Qualifications & Skills
• Minimum 10 years’ experience in information security department of the bank leading the team and handling regulatory audits (RBI, SEBI, UIDAI, etc.).
• In-depth knowledge of banking security infrastructure, DC/DR, cloud security, and application security.
• Hands-on experience in designing & implementing banking security architecture.
• Strong leadership, analytical, and stakeholder management skills.
• Proven experience in SOC 2 compliance and cybersecurity operations.
• In-depth knowledge of RBI regulations, data protection, and global privacy laws
• Experience in managing cybersecurity programs in global markets (India, US, Middle East).

---