Head of Security

Head of Information Security – TReDS

Full-time | Mid- Senior Leadership Role -5-8years

Location:

About C2Treds

C2Treds is an RBI-approved TReDS platform, of C2FO—the world’s leading on-demand working capital platform. Our mission is clear: to empower every MSME in India with the working capital they need to thrive, driving long-term sustainability and economic growth. At C2Treds, a strategic initiative by C2FO, we are transforming the landscape for MSMEs in India by unlocking easier access to working capital. As India’s only fintech platform offering both Early Pay and TReDS functionalities, we enable businesses to bypass receivables delays, enhance financial agility, and unleash their full growth potential.

We understand that MSMEs are the backbone of India’s economy, contributing to 30% of the country’s jobs. Yet, these businesses often face significant barriers like restrictive debt cycles, high interest rates, and delayed payments that stifle their growth potential. That’s where C2Treds comes in with over 50,000 MSMEs in C2FO’s India network, we are dedicated to breaking down these financial barriers and providing a direct path to success.

By joining C2Treds, you’ll be part of an innovative, growth-driven company at the forefront of transforming MSME financial empowerment and shaping India’s economic future.

As the Head of Security, you will be the strategic architect and operational guardian of TReDS' information security landscape. You’ll lead the design, execution, and management of robust security initiatives to safeguard the platform’s data, systems, and networks—ensuring resilience in a regulated and rapidly evolving fintech ecosystem.

Key Responsibilities

• Design and execute a holistic information security strategy that aligns with TReDS’ business goals and complies with relevant regulatory mandates.
• Lead comprehensive risk assessments and vulnerability scans to proactively identify and address security threats.
• Develop and enforce information security policies, standards, and protocols to minimize risk and protect sensitive data.
• Oversee daily security operations and ensure rigorous adherence to security policies and procedures across the TReDS platform.
• Spearhead incident response efforts, coordinating with stakeholders to swiftly contain, investigate, and mitigate security breaches.
• Direct real-time monitoring and threat detection through security systems and tools, enabling rapid response to potential intrusions.
• Ensure organizational compliance with all applicable industry standards, legal requirements, and regulatory frameworks.
• Conduct regular audits and security assessments to uncover and resolve compliance gaps.
• Collaborate with cross-functional teams to embed security best practices into business processes.
• Lead identification, evaluation, and mitigation of security risks tied to operations, technology infrastructure, and third-party relationships.
• Develop and operationalize a dynamic risk management framework that prioritizes and addresses key threats.
• Assess and manage security risks associated with external vendors and partners, ensuring adherence to TReDS’ security benchmarks.
• Champion a security-first mindset across the organization, mentoring team members and promoting a culture of accountability, awareness, and excellence.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related discipline.
• Recognized certifications such as CISSP, CISM, or CISA.
• Minimum 6 years of experience in information security teams with managing entire process.
• In-depth knowledge of security frameworks and standards, especially those relevant to the Indian financial sector.
• Demonstrated success in building and executing enterprise-grade security programs.
• Strong leadership, interpersonal, and communication skills.
• Ability to thrive in fast-paced, high-stakes environments.
• Familiarity with cloud security principles and data privacy regulations.

Preferred Qualifications

• Prior experience in the fintech domain.
• Knowledge of Indian data privacy regulations, including the Personal Data Protection Bill.