{"id":4059142,"url":"https://alion.io/job/fibe-information-security-manager-fintech","title":"Information Security Manager - Fintech","company":{"id":180255,"name":"Fibe","domain":"fibe.in","url":"https://alion.io/company/fibe","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CIS Benchmarks","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Akamai","optional":true},{"name":"Amazon EKS","optional":true},{"name":"AWS","optional":true},{"name":"AWS WAF","optional":true},{"name":"Azure","optional":true},{"name":"Checkmarx","optional":true},{"name":"CI/CD","optional":true},{"name":"Cloudflare","optional":true},{"name":"Crowdstrike","optional":true},{"name":"CyberArk","optional":true},{"name":"DLP","optional":true},{"name":"GCP","optional":true},{"name":"GitHub Actions","optional":true},{"name":"GitLab CI","optional":true},{"name":"Google GKE","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"IAM","optional":true},{"name":"Jenkins","optional":true},{"name":"Kubernetes","optional":true},{"name":"Least Privilege","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"Nessus","optional":true},{"name":"Okta","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Python","optional":true},{"name":"Qualys Cloud Platform","optional":true},{"name":"Semgrep","optional":true},{"name":"SentinelOne","optional":true},{"name":"ServiceNow","optional":true},{"name":"Snyk","optional":true},{"name":"Splunk","optional":true},{"name":"STRIDE","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Trivy","optional":true},{"name":"Veracode","optional":true},{"name":"VPN","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-11-11T06:24:42Z","employer_posted_date":null,"last_verified_at":"2026-11-11T06:24:42Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Key Responsibilities:\n\nSecurity Strategy & Governance:\n\n- Define, implement, and continuously evolve Fibe's information security strategy, policies, and frameworks in line with business growth and regulatory expectations (RBI guidelines, ISO 27001, PCI-DSS, SOC 2, etc.)\n\n- Own the enterprise security roadmap covering cloud security, application security, data protection, identity & access management, and third-party risk.\n\n- Partner with the CISO to present security posture, risks, and investment priorities to senior leadership and the board.\n\nSecurity Operations & Risk Management:\n\n- Lead vulnerability management, threat detection, and incident response programs.\n\n- Own security incident management - from detection and containment to root cause analysis and post-incident reporting.\n\n- Drive proactive risk assessments across products, infrastructure, and vendor ecosystems.\n\n- Oversee security monitoring (SOC/SIEM), penetration testing, and red-teaming exercises.\n\nCompliance & Regulatory:\n\n- Ensure compliance with RBI digital lending guidelines, data protection regulations (DPDP Act), and industry certifications (ISO 27001, PCI-DSS, SOC 2).\n\n- Act as a key point of contact during regulatory audits, customer security reviews, and compliance assessments.\n\n- Build and maintain a strong audit-readiness culture across engineering and business teams.\n\nLeadership & Team Building:\n\n- Build, mentor, and lead a high-performing security team (security engineers, analysts, and specialists).\n\n- Foster a security-first culture across the organization through training, awareness programs, and cross-functional collaboration.\n\n- Act as a trusted advisor to engineering and product leaders, embedding security into the SDLC (DevSecOps).\n\n- Deputize for the CISO in leadership forums, external representation, and strategic decision-making as needed.\n\nStakeholder & Vendor Management:\n\n- Collaborate with legal, compliance, engineering, and business teams to balance security requirements with business velocity.\n\n- Manage relationships with external auditors, security vendors, and regulatory bodies.\n\n- Evaluate and onboard security tools and technologies to strengthen Fibe's defense posture.\n\nRequirements:\n\nExperience & Technical Skills:\n\n- 5 - 10 years of experience in information security, with at least 2 - 3 years in a leadership or managerial capacity.\n\n- Experience with security frameworks and standards: ISO 27001, PCI-DSS, NIST CSF, SOC 2, CIS Benchmarks.\n\n- Working knowledge of RBI regulations for digital lending / fintech and data protection laws (DPDP Act) is highly desirable.\n\n- Familiarity with DevSecOps practices and integrating security into CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions).\n\n- Cloud Security: Hands-on experience securing AWS/GCP/Azure environments - IAM policies, VPC/network segmentation, CSPM tools (Wiz, Prisma Cloud, AWS Security Hub), Kubernetes/container security (EKS/GKE, Aqua, Trivy), and cloud-native logging (CloudTrail, GuardDuty).\n\n- Application & Product Security: SAST/DAST/SCA tooling (Checkmarx, Veracode, Snyk, Semgrep, OWASP ZAP, Burp Suite), secure code review, API security, threat modeling (STRIDE), and OWASP Top 10 / Mobile Top 10 remediation.\n\n- Network & Infrastructure Security: Firewalls, IDS/IPS, WAF (Cloudflare, AWS WAF, Akamai), network segmentation, VPN, DDoS mitigation, and secure architecture design.\n\n- Identity & Access Management: SSO/IAM platforms (Okta, Azure AD, AWS IAM), MFA, privileged access management (CyberArk, HashiCorp Vault), and role-based/least-privilege access design.\n\n- Security Operations & Monitoring: SIEM (Splunk, Microsoft Sentinel, ELK), SOAR, EDR/XDR (CrowdStrike, SentinelOne, Microsoft Defender), threat intelligence platforms, and 24x7 SOC oversight.\n\n- Incident Response & Forensics: IR playbooks, digital forensics, malware analysis fundamentals, breach containment, and coordination with CERT-In for regulatory incident reporting.\n\n- Vulnerability & Risk Management: Vulnerability scanning (Qualys, Nessus, Tenable), patch management, penetration testing coordination (internal/external), and bug bounty program oversight.\n\n- Data Security & Cryptography: Encryption (at-rest/in-transit), key management (KMS/HSM), tokenization, DLP tools, and data classification frameworks - critical given handling of financial and PII data.\n\n- GRC Tooling: Experience with GRC platforms (Archer, ServiceNow GRC, OneTrust) for policy management, risk registers, and audit workflows.\n\n- Scripting & Automation: Working knowledge of Python, Bash, or similar for security automation, log analysis, and tool integration is a plus.\n\nLeadership & Soft Skills:\n\n- Demonstrated ability to build, mentor, and scale a security team.\n\n- Strong stakeholder management and communication skills - able to translate technical risk into business language for leadership and the board.\n\n- Sound judgment and decisiveness in high-pressure incident scenarios.\n\n- Strategic mindset with the ability to balance security rigor with business agility.\n\nPreferred Certifications:\n\n- CISSP, CISM, CEH, or equivalent.\n\nEducation:\n\n- Bachelor's / Master's degree in Computer Science, Information Security, or a related field.\nSkills\nInformation Security, Cyber Security, IT Jobs in BFSI, IT Risk Management, IT Compliance, CISM","description_format":"text","description_chars":5312,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Mobile Games","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-11-11T07:11:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["seen:0","win:early"],"computed_at":"2026-11-11T09:09:13Z"},"pay":null,"html_url":"https://alion.io/job/fibe-information-security-manager-fintech","json_url":"https://alion.io/job/fibe-information-security-manager-fintech.json","meta":{"generated_at":"2026-11-11T09:09:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15018,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":180255},"rest":"https://alion.io/mcp/rest/get_company?id=180255"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffibe-information-security-manager-fintech"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffibe-information-security-manager-fintech"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffibe-information-security-manager-fintech"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fibe-information-security-manager-fintech\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffibe-information-security-manager-fintech"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4059142}},{"tool":"search_jobs","arguments":{"company":"fibe.in","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4059142},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}