{"id":2770853,"url":"https://alion.io/job/kreditbee-vice-president-data-protection","title":"Vice President - Data Protection","company":{"id":38476,"name":"KreditBee","domain":"kreditbee.in","url":"https://alion.io/company/kreditbee","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Darwinbox","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":55000,"max_usd":112000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":50},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-30T04:09:34Z","employer_posted_date":null,"last_verified_at":"2026-09-30T04:09:34Z","board_verified":false,"closed_at":null,"days_open":33,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":33},"description":"Overview :\n\nWe are seeking a hands-on security leader to build and own our data protection and application security function from the ground up. This role reports directly to the CTO and carries a direct mandate to close gaps, enforce standards, and embed proactive security into product and engineering workflows. In fintech, data is the product and protecting it is protecting the business.\n\nResponsibilities :\n\nData Leakage Detection & Prevention :\n\n- Design and operationalize a comprehensive DLP framework across structured data stores, APIs, SaaS tools, email, and endpoints.\n\n- Implement continuous monitoring to detect anomalous queries, bulk exports, unauthorized reads, and privilege abuse in real time.\n\n- Own sensitive data classification and enforce access boundaries across storage, application, and transport layers.\n\nAPI & Application Flow Security :\n\n- Conduct deep audits of internal and external APIs, reviewing contracts, authentication, and data scopes to identify vulnerabilities (BOLA, excessive exposure, broken auth, etc.).\n\n- Walk product flows end-to-end to identify over-exposure, unnecessary retention, and unintended access paths.\n\n- Actively participate in threat modelling during SDLC for new features.\n\n- Define and enforce API security standards with measurable release pipeline gates.\n\nDatabase & Infrastructure Access Control :\n\n- Audit and redesign least-privilege access models across databases and warehouses.\n\n- Implement query-level monitoring, data masking in non-production, and tokenisation where applicable.\n\n- Ensure defensible, documented access justifications for all data stores.\n\nEmployee Data Risk & Internal Threat Containment :\n\n- Identify and close employee data exfiltration channels (email, cloud sync, SaaS integrations, removable media).\n\n- Deploy technical DLP controls for outbound data movement.\n\n- Implement tiered RBAC/ABAC frameworks with regular access reviews.\n\nCustomer Account & Identity Protection :\n\n- Own detection and prevention of account takeover, spoofing, and unauthorized session access.\n\n- Review authentication flows, session management, and customer data exposure directly with product and engineering.\n\n- Maintain zero-blind-spot ownership of identity vulnerabilities.\n\nRisk Reporting & Organizational Influence :\n\n- Produce risk-rated findings with business impact context for both technical teams and the board.\n\n- Constructively challenge infra, product, engineering, and CISO functions when gaps are identified.\n\n- Build a culture of proactive data protection embedded in engineering and product practices.\n\nRequirements :\n\nExperience :\n\n- 10 - 14 years in security, with 4 - 5 years in fintech, payments, banking, or financial data environments.\n\n- Hands-on expertise in application security, API security, and data access governance.\n\n- Prior experience building a security sub-function from scratch strongly preferred.\n\n- Backgrounds may include: Senior AppSec Engineer, Principal Security Architect, Red Team Lead, or senior penetration tester turned internal security leader.\n\nProduct Mindset & Systems Thinking :\n\n- Ability to map complete product flows and identify leakage risks from design decisions.\n\n- Skilled at engaging product/engineering teams in their language, framing risks in terms of user impact and system design.\n\n- Curiosity-driven approach: asking 'why does this system work this way?' before 'what CVEs apply here?'\n\nTechnical Skills :\n\n- OWASP API Top 10, DLP tooling, STRIDE/PASTA threat modelling.\n\n- SIEM & detection rules, RBAC/ABAC, OAuth 2.0, JWT security.\n\n- Database audit & access control, data masking & tokenisation.\n\n- API penetration testing, endpoint DLP, session management.\n\nPrivileged Access Management :\n\n- Strong command of database security, audit logging, and privilege management.\n\n- Ability to write meaningful SIEM detection rules and alerting logic.\n\n- Solid understanding of IAM, RBAC/ABAC, OAuth 2.0, JWT vulnerabilities, and session security.\n\nRegulatory Awareness :\n\n- Working knowledge of PCI-DSS, SOC 2, GDPR, and local financial regulations (RBI, MAS, FCA).\n\n- Compliance understood as guardrails, not the primary measure of success.\n\nLeadership & Influence :\n\n- Proven ability to drive change across engineering, product, and business teams.\n\n- Strong communication skills - translating technical vulnerabilities into board-level risk statements.\n\n- Politically resilient, evidence-driven, and ego-free.\n\n- Builder mindset: thrives in greenfield environments, leads by doing.\n\nThe Team You Will Build :\n\nYou will hire and manage specialists with full ownership of team structure and tooling selection:\n\n- API & Application Security Specialist - continuous API auditing, threat modelling, SDLC security gates.\n\n- Data Access & Monitoring Specialist - database governance, query monitoring, anomaly detection.\n\n- Internal Threat & Employee Risk Analyst - controls for internal data egress, access provisioning reviews.\n\nWhy Join Us :\n\n- Direct mandate from the top - report to the CTO, not into a security hierarchy.\n\n- Real authority - findings are acted on, gaps get closed.\n\n- Greenfield build - define the function, tools, processes, and team.\n\n- Hands-on leadership - lead by doing, not delegating.\n\n- Meaningful problem - in fintech, data is the product. Protecting it is protecting the business.\nSkills\nData Privacy Management, Data Security, DLP, Threat Detection, Security Risk Management, Privilege Access Management, Applications Security, SIEM, Threat Modeling","description_format":"text","description_chars":5514,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Business & SME Lending","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-10-17T04:49:54Z"}],"visa":[],"liveness":{"score":25,"band":"fade","label":"Fading","p_open":0.6,"p_active":0.757,"p_room":0.55,"age_days":33,"expected_fill_days":29,"reasons":["seen:33","velocity","win:tail"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/kreditbee-vice-president-data-protection","json_url":"https://alion.io/job/kreditbee-vice-president-data-protection.json","meta":{"generated_at":"2026-11-02T14:40:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20361,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":38476},"rest":"https://alion.io/mcp/rest/get_company?id=38476"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkreditbee-vice-president-data-protection"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkreditbee-vice-president-data-protection"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkreditbee-vice-president-data-protection"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kreditbee-vice-president-data-protection\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkreditbee-vice-president-data-protection"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2770853}},{"tool":"search_jobs","arguments":{"company":"kreditbee.in","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2770853},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}