Manager

Experience: 8-15 years

Designation: Manager – Information Security

Location: Gift City, Gandhinagar, Gujarat

Qualifications:

• B.E or Equivalent graduation
• Excellent Spoken and Written communication in English and Gujarati
• Knowledge / Experience of Market Infrastructure Institutions would be preferred.
• Working in Gandhinagar

Reports to: Chief Technology Officer

Primary Responsibilities:

• Security Planning: Develop and implement a comprehensive security strategy to

protect the company’s information assets and infrastructure.

• Risk Management: Identify, assess, and mitigate risks related to information security,

ensuring the company’s resilience against cyber threats.

• Regulatory Compliance: Ensure compliance with relevant Market Infrastructure

Institutions (MII) (SEBI & IFSCA) regulations, standards & Frameworks like Data

Protection, PII, ISO 27001, NIST, COBIT and industry-specific guidelines.

• Security Incident Management & Response: Lead the response to security incidents,

including investigation, containment, and remediation efforts.

• Security Policies and Procedures: Establish and enforce security policies, standards,

and procedures to maintain a robust security posture.

• Developing Security Policies: Create and implement security policies, standards, and

procedures to protect the organization’s data and systems.

 Risk Management: Conduct regular risk assessments and vulnerability analyses to

identify and mitigate potential security threats.

• Security Audits: Coordinate and perform security audits and assessments to ensure up

to date Information & Technology security posture, compliance with relevant laws,

regulations, and standards. Perform Internal Information security assessment & audits

of the company and Perform company’s participants Information security assessment

& audits.

• Employee Training: Train and educate employees on information security best

practices and promote a culture of security awareness.

• Collaboration: Work with Information Technology, Application development and other

departments to enhance security measures and ensure alignment with business

objectives. Work closely with CTO, to align security initiatives with business objectives

and regulatory requirements.

Skills and Qualifications

• Educational Background: A degree in computer science, information technology,

cybersecurity, or a related field.

• Professional certifications: Certifications like CISSP, CISM, CISA or other relevant

cyber security professional certification is must.

• Experience: Extensive experience in information security, particularly within the

MII/financial sector, typically 8+ years.

• Technical Proficiency: Deep understanding of security technologies, threat modelling,

and risk management frameworks, policies & procedures. Knowledge of security

frameworks like ISO 27001, NIST, or COBIT, and familiarity with security tools and

technologies (e.g., firewalls, IDS/IPS, SIEM).

• Interpersonal skills: Project management skills, with the ability to work with cross

functional teams.

• Communication, Presentation and writing: Excellent written and verbal

communication skills to effectively convey security concepts to both technical and

non-technical stakeholders. Draft / update security policies, procedures, training

materials, security documentation

Key Focus Areas

• Data Protection: Implement measures to protect sensitive business data from

breaches and unauthorized access.

• Cyber Threat Intelligence: Stay updated on the latest cyber threats and trends and

adapt security strategies accordingly.

• Business Continuity: Develop and maintain business continuity and disaster recovery

plans to ensure operational resilience.