Senior Manager Information Security

1 day ago

Bengaluru, Karnataka, India Finnable Full time
Role – Senior Information Security Manager

About Finnable

Founded by three ex-bankers with deep experience in banking and startups, Finnable is a five-year-young fintech transforming consumer lending across India. With a presence in over 80 cities and rapidly expanding, our mission is to make access to credit faster, more secure, and refreshingly straightforward.

Role Overview

We are seeking an experienced Senior Information Security Manager will be responsible for building, implementing, and leading Finnable's Information Security function to safeguard data, systems, and operations. This is a senior leadership role with cross-functional exposure, critical for ensuring compliance with regulatory guidelines (RBI, ISO, etc.) and managing security risks in a digital-first financial ecosystem.

Key Responsibilities

- Strategic Leadership : Define and implement Finnable's overall Information Security strategy aligned with business objectives and regulatory expectations.
- Act as the primary liaison with senior management and regulators (including RBI) on security-related matters.
- Establish and chair the Information Security Steering Committee.
- Governance, Risk, and Compliance (GRC) Ensure compliance with RBI cybersecurity and IT risk management guidelines for NBFCs/fintechs.
- Lead audits, regulatory inspections, and external assessments (ISO 27001, IS, SOC, etc.).
- Develop and maintain security policies, standards, and procedures.
- Security Operations & Risk Management Oversee security monitoring, incident detection, and response (SIEM, SOC).
- Perform regular risk assessments, vulnerability assessments, and penetration testing.
- Manage identity & access control, endpoint protection, and network security.
- Lead crisis management in case of cyber incidents.
- Data Privacy & Protection : Ensure compliance with India's DPDP Act and global privacy regulations where applicable.
- Implement strong data classification, encryption, and retention policies.
- Collaboration & Awareness Partner with Engineering, IT, and Operations teams to embed security by design.
- Lead internal training, awareness programs, and phishing simulations.

Qualifications & Experience

- Education: Bachelor's degree in Computer Science, Information Technology, or related field. (Advanced certifications preferred.)
- Experience: Minimum 5+ years of experience in Information Security roles.
- Strong preference for candidates from lending, payments, or fintech organizations.
- Demonstrated ability to manage compliance with RBI, ISO 27001 frameworks.
- Certifications (preferred): CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer, CEH.

Key Skills

- Deep knowledge of cybersecurity frameworks (NIST, ISO 27001, RBI Master Directions).
- Strong leadership and stakeholder management skills.
- Hands-on experience in risk management, incident response, and regulatory compliance.
- Excellent communication and presentation skills (regulator and board-level interaction).
- Ability to balance business agility with robust security controls.

Why Join Finnable?

- Work closely with leadership on shaping the company's security-first culture.
- Be part of a mission-driven fintech revolutionizing consumer credit.
- Exposure to cutting-edge fintech systems, lending, and payments ecosystems.
- Competitive compensation and fast career growth.

Location: Bangalore

Type: Full-time | Onsite

  • Senior Information Security Manager

    24 hours ago

    Bengaluru, Karnataka, India beBeeSecurity Full time ₹ 18,00,000 - ₹ 25,00,000

    Information Security Management System SpecialistWe are seeking an experienced Information Security Management System Specialist to join our team.Job Description:Establish, implement, maintain and improve the Information Security Management System (ISMS) as per ISO 27001:2022 Standard.Develop and conduct comprehensive information security training...

  • Information Security Manager

    4 weeks ago

    Bengaluru, Karnataka, India Merkle Science Full time

    Job DescriptionThe purpose of this role is to embed security into the Creative Practice areaJob Description:Information Security ManagerThe Information Security Manager role within Dentsu Creative is responsible for providing security oversight for customer solutions and infrastructure within the managed services environment across various technology...

  • Manager, Information Security

    4 weeks ago

    Bengaluru, Karnataka, India LinkedIn Full time

    LinkedIn was built to help professionals achieve more in their careers, and everyday millions of people use our products to make connections, discover opportunities and gain insights. Our global reach means we get to make a direct impact on the world's workforce in ways no other company can. We are much more than a digital resume – we transform lives...

  • Manager, Information Security

    4 weeks ago

    Bengaluru, Karnataka, India LinkedIn Full time

    was built to help professionals achieve more in their careers, and everyday millions of people use our products to make connections, discover opportunities and gain insights. Our global reach means we get to make a direct impact on the world's workforce in ways no other company can. We are much more than a digital resume – we transform lives through...

  • Mashreq - Senior Manager - Risk Management & Reporting - Information Security Group

    4 days ago

    Bengaluru, Karnataka, India Mashreq Global Services Private Limited Full time

    Mashreq - Senior Manager - Risk Management & Reporting - Information Security Group - The Information Security Risk Management and Reporting Manager supports in formulating the overall risk management strategy and objectives for the bank's information security function.- This role involves aligning security risks with business goals, defining risk...

  • Senior Information Security Director Position

    12 hours ago

    Bengaluru, Karnataka, India beBeeInformation Full time ₹ 1,80,00,000 - ₹ 2,00,00,000

    Job Opportunity: Information Security DirectorWe are seeking an experienced Information Security Director to lead our team. This is a high-profile role that requires strategic thinking, technical expertise, and leadership skills.Key Responsibilities:Develop and implement information security strategies to mitigate risks.Lead cross-functional teams to achieve...

  • Audit Management Lead

    21 hours ago

    Bengaluru, Karnataka, India beBeeInformationSecurity Full time ₹ 15,00,000 - ₹ 25,00,000

    As a seasoned Information Security professional, you will play a pivotal role in overseeing client security questionnaires and ensuring compliance with industry standards. This position demands exceptional organizational skills, excellent communication abilities, and strong project management capabilities.Job DescriptionThis high-profile role is accountable...

  • Information Security Risk Manager

    3 days ago

    Bengaluru, Karnataka, India beBeeCloud Full time ₹ 9,00,000 - ₹ 12,00,000

    Job Summary:We are seeking an experienced Information Security Risk Manager to join our team. As a key member of our security team, you will be responsible for identifying and mitigating potential security risks to our organization.Key Responsibilities:Security Risk Assessment: Conduct regular security risk assessments to identify potential vulnerabilities...

  • Manager - Information Security (Assurance)

    3 weeks ago

    Bengaluru, Karnataka, India Navi Full time

    About the TeamAt Navi, the InfoSec team safeguards our digital ecosystem - ensuring the confidentiality, integrity, and availability of critical systems and data. We lead the charge on information security risk management, regulatory compliance, and data protection, while championing a security-first culture across all teams.Our mission: Protect what powers...

  • Manager - Information Security (Assurance)

    1 week ago

    Bengaluru, Karnataka, India Navi Full time

    About the Team At Navi, the InfoSec team safeguards our digital ecosystem - ensuring the confidentiality, integrity, and availability of critical systems and data. We lead the charge on information security risk management, regulatory compliance, and data protection, while championing a security-first culture across all teams. Our mission: Protect what...