Manager - Information Security And Governance

You will be responsible for developing policies in the DLP system to monitor data exchange to the external environment through emails, endpoints, and web uploads. Your role will involve investigating and concluding violation cases where data was exchanged externally. You will continuously improve existing DLP policies based on the learnings from audits and violation cases. Additionally, you will be in charge of implementing and governing the OCR solution on DLP through Index Data Matching (IDM) to enhance data protection. Your main objective will be to minimize DLP violation cases through the continuous enhancement of the existing DLP setup. You will manage incidents related to DLP cases and engage regularly with internal stakeholders to resolve open incidents or audit observations on DLP. Furthermore, you will be responsible for delivering presentations to various management committees from a DLP perspective. As part of your responsibilities, you will also be involved in proof of concept (POC) and discussions with DLP solution providers to upgrade or replace the existing solution. You will support the Security Operations Center as a subject matter expert, providing advice, training, and technical support to internal and external stakeholders. Additionally, you will mentor junior resources in the DLP team to ensure their professional growth. Mandatory Skills Required: - Proven experience in the implementation, maintenance, and governance (minimum 5-6 years of relevant experience) of DLP solutions. - Technical skills required to handle the DLP system and understanding of the infrastructure supporting the DLP system. - Strong understanding of Regulatory Guidelines on Data Privacy, Data Protection, DLP, etc. - Experience in handling internal stakeholders as well as vendor interactions, monitoring, and implementing processes. Desirable Skills: - Knowledge of the retail loan sector/NBFC processes. - Strong writing and communication skills. - Ability to handle multiple initiatives simultaneously. - Certification related to DLP, data privacy, etc.,