Security Strategy Manager

Role & responsibilities

Strategic Leadership:

• Develop, lead, and support executing the companys information security strategy in alignment with business objectives and regulatory requirements.

• Contact market research, and analyse industry best practices and competitive benchmarks to define long-term security goals and roadmaps. Work closely with the CISO to ensure proactive risk mitigation and effective threat management.

Regulatory Compliance:

• Ensure compliance with RBI guidelines, ISO 27001, DPDP and other applicable regulatory standards.

• Work closely with compliance and legal teams during audits, inspections, and incident response.

Incident Management:

• Oversee incident response planning, readiness, and investigation.

• Lead root cause analysis and continuous improvement processes after security incidents.

Stakeholder Engagement:

• Collaborate with senior leadership, IT, operations, and third parties to ensure holistic security integration.

• Serve as a subject matter expert and advisor on security implications for strategic projects and acquisitions.

Technology Oversight:

• Evaluate and recommend security technologies, tools, and architectural solutions based on market research and the organizations identified threat landscape to strengthen overall security posture.

• Provide guidance to the team on implementing the most effective and appropriate security tools, ensuring alignment with industry best practices.

Experience:

• 15+ years of experience in cybersecurity, including security architecture, cloud security, and infrastructure security.

• Strong understanding of NBFC regulatory landscape and financial cybersecurity threats.

• Excellent knowledge of security architecture, risk assessment methodologies, and compliance management.

Technical Skills:

• Experience with various security solutions and integration

• Certifications such as CISSP, CISM, CISA, CRISC, or equivalent is highly desirable.

• Familiarity with cloud security risks and supply chain security.