Cyber Security Specialist

A Bank Broker is seeking a highly skilled and strategic  Cybersecurity Officer  to lead organization's security governance and defense strategies. In this high-impact role, you will bridge the gap between technical security and business goals, ensuring robust risk management and compliance with regulatory standards (SEBI, NSE).

If you are a CISM-certified leader with a background in the  Trading and Securities industry  and a passion for building security-first cultures, we want to hear from you.

Key Responsibilities
1. Governance, Risk & Compliance (GRC)
Strategy & Policy:  Develop, maintain, and enforce cybersecurity policies, procedures, and standards aligned with business objectives.
Regulatory Compliance:  Ensure strict adherence to relevant laws and regulations, specifically  SEBI and NSE Regulations , as well as  ISO 27001  standards.

Risk Management:

Conduct enterprise-wide risk assessments, manage risk registers, and recommend appropriate mitigation strategies.
2. Security Program Leadership
Strategic Leadership:  Lead the organization's information security program, ensuring alignment with overall business goals.
Audit Management:  Coordinate and lead internal and external audits, including  SOC 2  and  ISO  certifications.
BCMS:  Oversee Business Continuity Management Systems (BCMS) per  ISO 22301  guidelines.
3. Incident Response & Operations
Incident Management:  Oversee the Incident Response Plan (IRP), leading efforts to detect, respond to, and recover from security breaches.
Monitoring:  Collaborate with IT and SOC teams to ensure real-time monitoring and actionable threat intelligence.
4. Vendor & Third-Party Risk
Vendor Assessment:  Assess security controls of third-party vendors and partners.
Procurement

Collaboration:

Work closely with procurement and legal teams to enforce secure vendor management practices.
5. Training & Culture
Awareness Programs:  Develop and deliver comprehensive security awareness training across the organization.
Culture Building:  Promote a proactive, security-first culture among all employees.
Qualifications & Requirements
Education &

Certifications:

Required:

Bachelor's degree in Computer Science, Information Security, or a related field.

Required:

CISM (Certified Information Security Manager)  certification.
Preferred:  Additional certifications such as CISSP, CRISC, or CISA.

Experience:

8+ years  of total experience in Information Security.
Minimum 2 years  in a leadership or management role.
Industry

Experience:

Prior experience in the  Trading and Securities Industry  is highly preferred.

Experience with  ISO 27001  and  ISO 22301  implementation and certification is a strong plus.
Technical

Skills:

In-depth knowledge of cybersecurity principles, network security, and incident handling.
Hands-on experience with  GRC (Governance, Risk & Compliance) tools .
Strong understanding of SEBI/NSE regulatory landscapes.

#Cyber Security #CISM #Info Sec #Risk Management #Mumbai Jobs #Trading And Securities  #SEBI #ISO
27001 #Governance #Security Leadership