Security Head

Dear Candidates,

Greetings from Mindgate

Role & responsibilities

We are seeking a dynamic and experienced Head of Security to lead the cybersecurity function for our critical UPI platform engagement. This is

a senior, hands-on leadership role responsible for defining and executing the overall security posture, strategy, and operations for the entire

program. Stationed at the client's premises, you will be an integral part of the "Run the Bank" (RTB) leadership team, with a crucial overlapping

responsibility for "Build the Bank" (BTB) security initiatives.

You will lead a dedicated team focused on RTB operations and BTB application security to proactively identify, assess, and mitigate security

risks across the platform's infrastructure, applications, and processes. The ideal candidate is a strategic thinker with a deep technical

foundation in offensive and defensive security, capable of both guiding a team and engaging with senior program leadership and client

stakeholders on all security matters.

Key Responsibilities

• Security Strategy & Leadership:

• Develop, implement, and manage the end-to-end security strategy for the UPI platform, covering infrastructure,

applications, data, and operations.

• Lead, mentor, and manage the performance of security team, fostering a culture of high performance and continuous

learning.

• Serve as the primary security advisor to the Program Director and Deputy Program Director, translating technical risks into

business impact.

• Operational & Infrastructure Security (Run the Bank):

• Oversee the security of the 24x7 production environment, working closely with the infrastructure teams to ensure robust

security controls.

• Direct the continuous monitoring, threat hunting, and security analysis of networks, servers, and endpoints.
• Govern the configuration and management of key security tools, including IPS/IDS, Firewalls, WAF, and SIEM.

• Application Security & DevSecOps (Build the Bank):

• Lead the application security program by embedding security practices into the Software Development Lifecycle (SDLC).
• Oversee Secure Code Reviews (SCR), Static Application Security Testing (SAST), and Dynamic Application Security Testing

(DAST) for all development activities.

• Collaborate with development and DevOps teams to remediate vulnerabilities and promote secure coding standards.

• Vulnerability & Threat Management:

• Own and direct the platform's vulnerability management lifecycle, from discovery to remediation.
• Commission and oversee regular penetration tests, red team exercises, and threat modelling activities to continuously

assess and improve the platform's resilience.

• Stay ahead of the threat landscape, ensuring the platform is protected against emerging attack vectors and techniques.

• Governance, Risk & Incident Response:

• Establish and enforce security policies, standards, and procedures aligned with industry best practices and client

requirements.

• Act as the lead and primary point of contact for all security incident response activities, ensuring rapid containment,

analysis, and recovery.

• Prepare and present regular reports on the security posture, risk levels, and incident status to senior management and

client stakeholders.

Required Qualifications & Experience

• Experience:

• 12-15+ years of dedicated experience in cybersecurity.
• A minimum of 4-5 years in a lead or management role, with proven experience in security strategy, team oversight, and

program management.

• Hands-on background in offensive security (Red Teaming, Penetration Testing) is essential.

• Education:

• Graduate/M.Tech / B.E. / B.Tech / MCA or equivalent degree in a relevant field.

Preferred candidate profile