(03/11/2025) ISG Awareness Operations

Job Description Job Purpose To manage and execute Information Security (Infosec) awareness initiatives for employees, customers, vendors, and non-bank staff across HDFC Bank. Key Responsibilities 1. Awareness Program Management Plan and execute Infosec awareness initiatives for: o Bank employees o Customers o Vendor staff o In-house non-bank staff Coordinate with HR to ensure PAN India coverage of awareness programs. 2. Content Development & Communication Create engaging awareness content on the latest information security trends and frauds (emailers, quarterly newsletters, wallpapers). Draft and design presentations, documents, and reports using MS PowerPoint, Word, and Excel. Collaborate with Awareness Lead for content approvals and feedback. 3. Training & Campaigns Manage and maintain the training calendar for: o Online training sessions o Classroom sessions Conduct branch visits across India to deliver awareness sessions. Coordinate with external trainers (e.g., DSCI) and internal teams for training delivery. Organize special campaigns like: o Cybersecurity Awareness Month (October) o Cyber Jagrookta Divas o Other RBI/NCIIPC initiatives 4. Simulated Attack Exercises (minimum six annually) Conduct monthly simulated phishing assessments for over 2.5 lakh users. Execute periodic vishing and smishing simulations. Track and report results to assess effectiveness and improve awareness and resilience. 5. E-Learning Management Oversee compliance to mandatory Infosec e-learning courses for bank and vendor staff. Update course content at least annually or as needed. Ensure timely completion and compliance tracking. Prompt reminders to staff and timely escalation to seniors to achieve compliance 6. Measurement & Reporting Evaluate effectiveness of awareness activities and training programs. Identify gaps and redesign learning methods, tools, and standards. Pre-empt regulatory lapses/non-compliances and swiftly address them. Prepare reports and content for CAAC meetings and track actionables. 7. Stakeholder Engagement Coordinate with: o Legal and Secretarial teams for senior management/board training o Marketing, Corporate Communications, and CIC for customer awareness o Internal teams for focused vendor awareness Seek inputs and approvals from relevant stakeholders. 8. Innovation & Research Stay updated on latest security trends, fraud techniques, and awareness strategies. Research and adopt new channels, topics, and tools for awareness. Understand fraud modus operandi and existing controls in digital banking to create relevant content. Job Responsibilities(JR) : 6 8 Areas Actionable (4-6) Oversee the infosec awareness operations Manage operational aspects for Infosec awareness initiatives for Bank employees/Customers/inhouse non-bank staff /vendor staff Training and awareness Conduct the Online and offline training initiatives RBI compliance / SOX audit /Stat audit /PCI/SEBI/NCIIPC Ensure that all the RBI & other regulatory compliance requirements with respect awareness are met by the Bank, without exceptions. HDFC bank gives maximum focus and weightage to compliance requirements and has zero tolerance for regulatory lapses. Tracking all the observations till remediation & closure confirmation by auditors & regulators Project management and tracking of project deadlines and milestones Project tracking and sending periodic updates for Awareness project. Raising timely alarms and red flags in case of delays. Prepare and manage slide for CAAC/ ISC /ISRMC /NCIIPC updates. Prepare update presentations for CAAC/ISC/ISRMC, etc. and other regulatory/senior management meetings. Compliance Comply to Internal audit / Sox audit/stat audit compliance Educational Qualifications (examples listed below) Key Skills(examples listed below) Graduation - /BSc IT /BE/ B Tech Certifications like CISA/CISM/CRISC/CISSP will be an added advantage Strong writing and communication skills in English. Ability to draft awareness content in an easy-to-understand format for end users Proficiency in MS Office tools (PowerPoint, Word, Excel). Planning and Organizing Skills Project management and coordination skills Ability to independently and effectively conduct online and offline training sessions. Analytical mindset to measure and improve awareness effectiveness. Technical proficiency to understand and interpret latest cybersecurity frauds and (MO) modus operandi. Experience of managing internal and external auditors requirements Ability to understand the existing controls in HDFC Bank (e.g. Netbanking, mobile banking, etc.) and develop relevant awareness content. Experience Required (examples listed below) Minimum experience in years 10 yrs and above Exposure to awareness activities banking & financial services preferable Major Stakeholders (intra team and cross functional stakeholders, who would need to be interacted with for discharging duties) Information Technology and BTG for projects. Marketing /CIC /Corporate communications IS audit team Meet internal and external compliance requirements PAN India end users for resolving queries HR / ER team The job also involves closely coordinating with external infosec awareness vendors