Avp It Security

Job Title Assistant Vice President AVP Information SecurityDepartment Information Security Location Noida Reports to CEO Job Type Full-Time Experience Level Mid-Senior LevelJob SummaryThe AVP Information Security will lead the development implementation and monitoring of a comprehensive information security strategy to safeguard critical microfinance information assets ensuring compliance with regulatory requirements and minimizing risks This role is responsible for managing and optimizing the organizations information security framework policies and procedures while proactively mitigating risks related to cybersecurity threats Key Responsibilities Develop and implement a comprehensive information security strategy aligned with the NBFC s overall business goals and risk management framework Ensure adherence to information security regulations and standards applicable to the NBFC sector such as the Reserve Bank of India RBI s guidelines on IT Framework for NBFCs Design implement and manage a robust information security architecture that protects the confidentiality integrity and availability of sensitive data This may include firewalls intrusion detection systems data encryption and access control mechanisms Proactively identify assess and remediate vulnerabilities in the NBFC s IT infrastructure and applications This involves conducting regular security assessments and penetration testing Develop and maintain a comprehensive incident response plan to manage security breaches and cyberattacks effectively Ensure a robust disaster recovery plan is in place to minimise downtime in case of disruptions Implement a security awareness program to educate employees on cyber threats and best practices for protecting sensitive information Assess and manage information security risks associated with third-party vendors and service providers the NBFC uses Qualifications Education Bachelors degree in Computer Science Information Technology Cybersecurity or a related field a Masters degree is preferred Certifications CISSP CISM CISA or other relevant information security certifications Experience 8 years of experience in information security including 3 years in a leadership role Previous experience in financial services preferably within the microfinance or banking sectors Technical Skills Knowledge of security frameworks NIST ISO 27001 regulatory compliance PCI DSS GDPR and security technologies firewalls SIEM endpoint protection Strong understanding of information security principles frameworks and methodologies e g NIST Cybersecurity Framework ISO 27001 Expertise in security technologies like firewalls intrusion detection prevention systems IDS IPS data encryption and access control systems Knowledge of relevant regulatory requirements for data security and privacy in the financial services industry Familiarity with IT infrastructure security best practices and risk management principles Experience working in information security roles within the financial services industry preferably NBFCs is a plus Certifications in information security such as CISSP Certified Information Systems Security Professional or CISA Certified Information Systems Auditor are highly desirable Excellent communication and interpersonal skills to collaborate effectively with various stakeholders across the NBFC Soft Skills Strong communication skills attention to detail analytical thinking and the ability to influence and work effectively with cross-functional teams