Job Description

Job Title: Assistant Vice President (AVP) Information Security
Department: Information Security
Location: Noida
Reports to: CEO
Job Type: Full-Time
Experience Level: Mid-Senior Level
Job Summary
The AVP Information Security will lead the development, implementation, and monitoring of a comprehensive information security strategy to safeguard critical microfinance information assets, ensuring compliance with regulatory requirements and minimizing risks. This role is responsible for managing and optimizing the organizations information security framework, policies, and procedures while proactively mitigating risks related to cybersecurity threats.
Key Responsibilities

• Develop and implement a comprehensive information security strategy aligned with the NBFC's overall business goals and risk management framework.
• Ensure adherence to information security regulations and standards applicable to the NBFC sector, such as the Reserve Bank of India (RBI)'s guidelines on IT Framework for NBFCs.
• Design, implement, and manage a robust information security architecture that protects the confidentiality, integrity, and availability of sensitive data. This may include firewalls, intrusion detection systems, data encryption, and access control mechanisms.
• Proactively identify, assess, and remediate vulnerabilities in the NBFC's IT infrastructure and applications. This involves conducting regular security assessments and penetration testing.
• Develop and maintain a comprehensive incident response plan to manage security breaches and cyberattacks effectively. Ensure a robust disaster recovery plan is in place to minimise downtime in case of disruptions.
• Implement a security awareness program to educate employees on cyber threats and best practices for protecting sensitive information.
• Assess and manage information security risks associated with third-party vendors and service providers the NBFC uses.

• Education: Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field; a Masters degree is preferred.
• Certifications: CISSP, CISM, CISA, or other relevant information security certifications.
• Experience:

• 8+ years of experience in information security, including 3+ years in a leadership role.
• Previous experience in financial services, preferably within the microfinance or banking sectors.
• Technical Skills: Knowledge of security frameworks (NIST, ISO 27001), regulatory compliance (PCI DSS, GDPR), and security technologies (firewalls, SIEM, endpoint protection).Strong understanding of information security principles, frameworks, and methodologies (e.g., NIST Cybersecurity Framework, ISO 27001).
• Expertise in security technologies like firewalls, intrusion detection/prevention systems (IDS/IPS), data encryption, and access control systems.
• Knowledge of relevant regulatory requirements for data security and privacy in the financial services industry.
• Familiarity with IT infrastructure security best practices and risk management principles.
• Experience working in information security roles within the financial services industry, preferably NBFCs, is a plus.
• Certifications in information security such as CISSP (Certified Information Systems Security Professional) or CISA (Certified Information Systems Auditor) are highly desirable.
• Excellent communication and interpersonal skills to collaborate effectively with various stakeholders across the NBFC.
• Soft Skills: Strong communication skills, attention to detail, analytical thinking, and the ability to influence and work effectively with cross-functional teams.