Security Engineer [InfoSec and Compliance]

We are looking for an experienced Information Security and Compliance Engineer to design and enforce policies and procedures that protect MFL customers data from security breaches. You will be responsible for implementing policies and procedures aligned with standards, frameworks, and regulations, including RBI guidelines for NBFCs.

ORGANIZATIONAL CHART

• Conduct internal audits and risk assessments to ensure compliance and improve ISMS of the organization as per industry standards.
• Develop, implement, and improve security policies, processes, and procedures.
• Monitor regulatory changes, manage compliance audits, and prepare reports for management and regulators.
• Provide training and guidance on compliance policies and best practices.
• Identify and mitigate risks across roles, software, and information categories.
• Track KPIs, analyse ISMS performance, and enhance efficiency.
• Respond to regulatory requests and ensure timely compliance reporting.

Internal Stakeholders

External Stakeholders

• Engineering / Software Development
• Cloud/DevOps Teams
• Cybersecurity
• IT Infra and Networks
• HR, People Ops
• Legal, Compliance
• Internal Audit team

• External Audit Team
• Regulators
• Third Party Providers/Vendors
• External VA PT

• Excellent problem-solving and analytical skills
• Ability to educate a non-technical audience about various security measures
• Effective verbal and written communication skills
• Fluent in English (both written and spoken)

• Degree in Computer Science, Information Security, Technology, Cybersecurity, or a related field.
• Solid knowledge of various information security frameworks (e.g., ISO 27001, PCI DSS), GRC principles, and security domains [e.g., risk management, incident response, access control, etc.]
• Experience participating in compliance audits, risk management and investigations
  in the banking or NBFC industry .
• I n-depth knowledge of RBI IT regulations and their application to IT systems and
  processes.
• Excellent problem-solving and analytical skills
• Ability to educate a non-technical audience about various security measures
• Effective verbal and written communication skills; documentation and presentation skills.
• Fluent in English (both written and spoken)