Key Responsibilities

Ensure end-to-end compliance with financial sector cybersecurity regulations, including RBI, NPCI, and CERT-In requirement
Interpret RBI, NPCI, and other financial regulations and translate them into actionable control requirements across products, platforms, and new services
Drive implementation and continuous compliance with RBI Cyber Security Framework, Master Directions on IT Governance, and Digital Payment Security Controls
Ensure periodic validation and effectiveness testing of implemented controls
Oversee security compliance for financial service
Ensure adherence to NPCI/ BBPS security standards for UPI, IMPS, and other payment rails
Manage cybersecurity governance across core banking systems, digital banking platforms, APIs, mobile applications, and cloud infrastructure
Perform gap assessments against RBI/NPCI guidelines and drive remediation programs
Lead coordination for RBI inspections, regulatory audits, and compliance reporting, ensuring timely closure of audit observations
Review and enforce security policies, standards, and procedures aligned with financial regulatory expectations
Work with different teams to ensure customer security questionnaire is completed
Own customer/partner questionnaire responses and regulatory alignment
Govern third-party and fintech partner risk, including payment aggregators, PSPs, and outsourcing partners as per RBI outsourcing guidelines
Ensure compliance with data localization mandates and secure storage/processing of financial data within India
Support cyber-incident response governance, including regulatory breach reporting (RBI/CERT-In within defined timelines)
Strengthen customer data protection, privacy, and secure transaction monitoring mechanisms

Key Skills & Experience

3–5 years of experience in security within banking, NBFC, fintech, payments bank, or digital payments ecosystem, with strong exposure to UPI, wallets, and payment platforms
Strong understanding of financial regulatory frameworks, including RBI Cyber Security Framework, RBI Master Directions (IT Governance & Outsourcing), NPCI guidelines (UPI/IMPS/AePS), and CERT-In requirements
Experience in implementing and governing controls aligned to digital payment security, transaction monitoring, and fraud risk management
Proven experience in regulatory audits, customer audit, RBI inspections, compliance reporting, and closure of audit observations
Strong stakeholder management and communication skills, with the ability to collaborate across multiple teams
Proactive approach to risk identification and mitigation

Educational Qualifications

Bachelor's degree in engineering, Computer Science, Information Security, or related field
Postgraduate degree or MBA (preferred, especially in Risk/Finance/IT)

Certifications (Preferred)

CISA, CISM, CISSP, ISO 27001 LA/LI

Information Security Analyst - GRC