2+ Information security governance Jobs in India

Qualifications & Experience

• 7–10 years of experience in Information Security, preferably in financial markets / BFSI sector.
• Proven track record of hands-on security implementation in Financial Markets, Trading systems, banking platforms, or other high-transaction environments.
• Strong understanding of security governance, risk management, and compliance processes aligned with international standards.
• Familiarity with tools & platforms like Splunk/QRadar, Qualys, Burp Suite, Nessus, CrowdStrike, or equivalent.
• Certifications preferred: CISSP, CISM, CEH, OSCP, CCSP, or equivalent.
•  

Key Skills

• Deep understanding of perimeter defense, endpoint security, encryption, IAM.
• Strong application security knowledge – OWASP Top 10, secure SDLC, DevSecOps.
• Ability to interface confidently with regulators, auditors, and CXOs.
• Analytical mindset with hands-on troubleshooting ability in complex environments.
• Excellent written and verbal communication skills.

Manager – Information Security

Experience: 10+ years (with minimum 3 years in leadership roles)

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO

27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

 Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS

and PIMS programs.

 Develop and manage the InfoSec strategy aligned with business goals and regulatory

requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

 Oversee security risk assessments, audits, and remediation plans across IT and business

units.

 Manage a team of security professionals; mentor, coach, and evaluate performance.

 Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by

design.

 Lead incident response, RCA, and post-mortem reviews.

 Drive security awareness and training programs across the organization.

 Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

 Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel

One EDR, Qualys VA and other PT tools.

 Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

 Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

Soft Skills:

 Strategic thinking

 Stakeholder management

 Team leadership

 Excellent communication

 Quality Documentation

email: etalenthire[at]gmail[dot]com

satish: 88O 27 49 743