Security Officer, Information Systems Security

About the role

Information Systems Security (ISS) team ensures cyber risk and compliance across the bank. The Security Officer leads policy development, risk control matrices, audits and KRI reporting, and drives governance frameworks such as SOX, COBIT and ISO 27001. Mumbai office, on-site work model.

What you’ll do

• Define and implement IT and IS security policies
• Identify risks and define controls across IT processes
• Draw up risk control matrices and conduct process audits
• Facilitate issue resolution with auditors and stakeholders
• Monitor and review regulatory frameworks such as SOX, COBIT, ISO 27001
• Analyze system logs, audit and VAPT reports
• Develop and manage GRC capabilities and monthly KRI reporting

What you’ll bring

• First class Graduate/Post Graduate in Science or Engineering
• CISA or CISM or CGEIT or CISSP or CEH
• CCNA

Nice to have

• 7-9 years experience in IT security and governance
• Identify, evaluate and document process risks and controls
• Develop and implement IS security policies and frameworks
• Conduct IT audits and risk control matrix reviews
• Manage monthly and quarterly security KRIs
• Evaluate and oversee security products like DLP and PCI DSS
• Conduct training programs on information security and compliance