Associate Director Security

Title: Associate Director -Security

Location: Gurugram

Experience: 10-14 Yrs.

Education: Bachelor’s / Master’s in Software Engineering

Responsibilities

Build and maintain strong relationships with stakeholders, and internal teams, to facilitate effective communication and collaboration.

Take ownership of internal Infosec tasks and ensure compliance with security policies and procedures.

Support in collating evidence from various stakeholders for internal and external certification audits, including ISO 27001, PCI DSS, RBI and other similar audits conducted by the Bank.

Perform initial-level Appsec activities, including API testing, mobile security and source code.scans using tools such as Codeguru, SonarQube, and Burpsuite.

Can independently perform vulnerability scans for the systems.

Assist in identifying and addressing security vulnerabilities and risks within systems and applications.

Provide guidance to other team members on security best practices and procedures.

Collaborate with other team members to ensure proactive closure of vulnerabilities and audit observations.

Stay informed about the latest security trends, threats, and technologies relevant to

operations.

Sounds Like You?

Bachelor’s degree in computer science, Information Technology, or a related field.

Previous experience in stakeholder management and engagement.

Strong understanding of information security principles and best practices.

Experience with certification audits, such as ISO 27001, PCI DSS and Indian regulatory audits from RBI.

Familiarity with Business Continuity and Disaster Recovery concepts.

Experience in conducting independent information security risk assessments.

Appsec activities, including API testing,source code scanning, Web application security testing, mobile application security testing, etc.

Proficiency in, or at least a basic understanding of, operating security testing tools such as CodeGuru, SonarQube, and Burp Suite.

Excellent communication and interpersonal skills.

Ability to work independently and take ownership of tasks.

Have prior experience working within a Fintech organization and familiarity with operational processes.

Relevant certifications, such as CISSP, CISA, CEH, ISO 27001 Lead Auditor & Lead

Implementers are a plus.