Information Security Analyst - GRC

Key Responsibilities

• Ensure end-to-end compliance with financial sector cybersecurity regulations, including RBI, NPCI, and CERT-In requirement
• Interpret RBI, NPCI, and other financial regulations and translate them into actionable control requirements across products, platforms, and new services
• Drive implementation and continuous compliance with RBI Cyber Security Framework, Master Directions on IT Governance, and Digital Payment Security Controls
• Ensure periodic validation and effectiveness testing of implemented controls
• Oversee security compliance for financial service
• Ensure adherence to NPCI/ BBPS security standards for UPI, IMPS, and other payment rails
• Manage cybersecurity governance across core banking systems, digital banking platforms, APIs, mobile applications, and cloud infrastructure
• Perform gap assessments against RBI/NPCI guidelines and drive remediation programs
• Lead coordination for RBI inspections, regulatory audits, and compliance reporting, ensuring timely closure of audit observations
• Review and enforce security policies, standards, and procedures aligned with financial regulatory expectations
• Work with different teams to ensure customer security questionnaire is completed
• Own customer/partner questionnaire responses and regulatory alignment
• Govern third-party and fintech partner risk, including payment aggregators, PSPs, and outsourcing partners as per RBI outsourcing guidelines
• Ensure compliance with data localization mandates and secure storage/processing of financial data within India
• Support cyber-incident response governance, including regulatory breach reporting (RBI/CERT-In within defined timelines)
• Strengthen customer data protection, privacy, and secure transaction monitoring mechanisms
  
  

• 3–5 years of experience in security within banking, NBFC, fintech, payments bank, or digital payments ecosystem, with strong exposure to UPI, wallets, and payment platforms
• Strong understanding of financial regulatory frameworks, including RBI Cyber Security Framework, RBI Master Directions (IT Governance & Outsourcing), NPCI guidelines (UPI/IMPS/AePS), and CERT-In requirements
• Experience in implementing and governing controls aligned to digital payment security, transaction monitoring, and fraud risk management
• Proven experience in regulatory audits, customer audit, RBI inspections, compliance reporting, and closure of audit observations
• Strong stakeholder management and communication skills, with the ability to collaborate across multiple teams
• Proactive approach to risk identification and mitigation
  
  

• Bachelor’s degree in engineering, Computer Science, Information Security, or related field
• Postgraduate degree or MBA (preferred, especially in Risk/Finance/IT)
  
  

• CISA, CISM, CISSP, ISO 27001 LA/LI