Senior Information Technology Security Officer

About the Company

Public Sector Bank / Financial Institution / NBFC (Through GA Digital Web Word Private Limited)

About the Role

This is a high-level Cyber Security role focused on IT Audit and Government Compliance. The incumbent is responsible for ensuring the institution’s information and network security programs comply with mandated RBI, RBI DAKSH and CERT-In frameworks. The role involves leading technical audits and representing the security function before regulators and statutory auditors.

Responsibilities

• Govern hardware security by hardening Windows/Linux servers to CIS baselines and managing firewall, IDS/IPS, and network configurations.
• Resolve website and application security issues by directing end-to-end VAPT and vulnerability assessments across web, mobile, and API platforms.
• Safeguard sensitive data through DLP implementation, encryption of data at rest/transit, and strict adherence to the DPDP Act 2023.
• Ensure data resilience via encrypted, air-gapped backups and verified restoration testing against defined RTO and RPO targets.
• Lead compliance for all hardware and software assets through RBI DAKSH, CERT-In (6-hour reporting), and the IT Act 2000.
• Oversee IT audits and mentor teams to translate technical website and hardware risks into strategic "Board-level" security language.

Qualifications

• Professional Experience
• Cyber Security: Minimum 7 years of dedicated experience in information/cyber security is mandatory.
• Leadership: Minimum 3 years in a supervisory or team-lead capacity within a security function.
• Industry: At least 5 years of experience in the BFSI sector (Banking, NBFC, or RBI-regulated financial institutions).
• Total IT Experience: 4 - 12 years of post-qualification experience.

• Educational Qualifications & Certifications
• Education: B.E. / B.Tech (CS, IT, E&C, or Cyber Security); OR MCA; OR M.Sc. (CS / IT).
• Preferred Certifications: CISA (Certified Information Systems Auditor), CISSP, or CISM.

Pay range and compensation package

Not specified in the provided job description.

12 LPA to 30 LPA (As per experience)