Assistant manager - information security audit and vulnerability management

Position Summary:

We are seeking a skilled and proactive Assistant Manager – Information Security Audit and Vulnerability Management to join our dynamic team. The ideal candidate will have prior experience in the Indian stock broking industry, with a solid understanding of SEBI and other regulatory requirements, strong technical expertise in security assessments, and the ability to communicate effectively with foreign clients and senior management.

Key Responsibilities:

Lead and manage periodic internal and external security audits, including system, process, and compliance audits. Monitor and coordinate vulnerability assessments and penetration testing (VAPT), ensuring timely remediation of identified issues. Act as a liaison with regulatory authorities (SEBI, NSE, BSE, CDSL, NSDL, etc.), internal / external auditors, clients and ensure compliance with applicable cyber security guidelines and circulars. Interpret and translate complex regulatory and technical requirements into clear, actionable security controls. Prepare and present audit findings, risk assessments, and security posture reports to senior management and international clients in a clear and concise manner. Collaborate with IT, Dev Ops, Infrastructure, and Business teams to drive timely closure of audit and vulnerability findings.

Required Qualifications & Experience:

Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related field. 5–8 years of experience in Information Security, preferably within a stock broking firm or capital markets organization in India. Proven experience with SEBI circulars, RBI/IRDA guidelines, and IT security audits. Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Open VAS) and SIEM platforms. Strong understanding of network and application security, encryption standards, and data privacy regulations. Relevant certifications such as CISA, CISSP, CEH, ISO 27001 LA/LI are highly preferred.

Key Skills:

Strong analytical and problem-solving skills. Ability to articulate regulatory and technical concepts to non-technical stakeholders. Excellent written and verbal communication skills, with experience handling foreign clients and executive-level presentations. Ability to work independently and as part of a cross-functional team. Project management skills and attention to detail.

Preferred Attributes:

Experience working in a hybrid or distributed team environment. Prior involvement in red/blue team exercises, or threat intelligence initiatives is a plus.