{"id":2922149,"url":"https://alion.io/job/npci-senior-leader-information-security","title":"Senior Leader Information Security","company":{"id":59461,"name":"NPCI","domain":"npci.org.in","url":"https://alion.io/company/npci","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"B","score":75,"open_postings":21,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":55000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-10-08T00:00:00Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-25T03:56:41Z","board_verified":true,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"About the role \nThis role is responsible for ascertaining and overseeing the risk and security guidelines and controls applicable to third parties interacting with NPCI. It will ensure ecosystem-wide compliance with evolving security requirements arising from innovations across the organization.\nThe core focus of the role will be to ensure that member banks and TPAPs comply with the standards laid down by NPCI. It will also interface with CERT-In, NCIIPC, NCCC, RBI, MeitY and other government bodies on cybersecurity-related matters.\nThe role will also play a key part in addressing privacy-related aspects, including adherence to the DPDP Act, GDPR and other applicable data protection requirements.\nWhat you’ll own\nStakeholder Management and Leadership\nProvide direction on regulatory compliance and cybersecurity protection.\nDemonstrate a thorough understanding of international governance and management principles.\nEngage with multiple stakeholders across organizational boundaries.\n\nRisk and Control Objectives\nDevelop and maintain robust international information security controls.\nProvide an external perspective to strengthen the design and implementation of security controls.\nLead and review assessments for external agencies and members.\nDecision-Making and Problem-Solving\nMake decisions regarding the maintenance of the security posture of the organization and its subsidiaries.\nIdentify emerging global cyber-threat trends and align organizational strategy to address them.\nProvide solutions to address international challenges related to security architecture.\nSpecialization in Multiple Security Domains\nAct as a subject matter expert (SME) across multiple internal security domains, such as Identity and Access Management (IAM), infrastructure security, application security cloud security, Data Privacy and DPDP Act.\nEngage with development teams to enable DevSecOps.\nDemonstrate SME-level knowledge of key security and data protection standards and frameworks, such as GDPR, CIS, ISO 27001, NIST and PCI DSS.\nWhat sets you apart\nMajor Challenges\nCoordinating with external entities and multiple stakeholders on information security-related matters.\nIdentifying security gaps and following up to ensure their closure.\nFocusing information security operations on external parties and addressing data protection and privacy-related concerns.\nDecisions Made by the Job Holder\nReviewing and verifying controls relating to third-party applications and member banks.\nCertifying third parties associated with NPCI.\nReviewing information security controls and guidelines followed by TPAPs and member banks.\nEffectively addressing various data-related concerns, as required by the Data Protection Officer (DPO), and ensuring adherence to DPDP and GDPR requirements.\nConducting various third-party audits to ensure acceptable levels of cyber hygiene.\nRecommendations to or Approval by Superior\nExceptions and approvals relating to third-party risks.\nMeasures to strengthen ecosystem-wide cyber hygiene.\nMatters relating to data protection and privacy.\nRequirements\nUnderstanding of Cybersecurity maturity frameworks and Information security standards like, but not limited to, ISO 27701, GDPR, PCI DSS, NIST 800-53, CIS 20, ISO 22301. \nExperience at engaging, influencing, and managing multiple stakeholders across departmental and organizational boundaries up to C-suite.\nExcellent understanding of legislations and regulations that impact Information security, e.g. GDPR.\nDevelop, implement and administer technical security standards as well as a suite of security practices.\nUnderstanding of cloud service deployment and architecture with implementation experience on multiple cloud platforms like AWS, Azure, GCP etc.\nGood understanding of security technologies and wider payment business solutions like Firewall, IDS/IPS, PIM/PAM, IAM setup, APIs, ISO 8583 etc.\nUnderstanding of the emerging threat landscape and technologies, and what measures can be taken to protect the information security posture of the organization.","description_format":"text","description_chars":4043,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Payment Processing & Gateways","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-20T12:29:11Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.591,"p_room":0.9,"age_days":17,"expected_fill_days":30,"reasons":["conf:1","stale_co","velocity","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/npci-senior-leader-information-security","json_url":"https://alion.io/job/npci-senior-leader-information-security.json","meta":{"generated_at":"2026-10-25T07:51:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11133,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59461},"rest":"https://alion.io/mcp/rest/get_company?id=59461"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnpci-senior-leader-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnpci-senior-leader-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnpci-senior-leader-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/npci-senior-leader-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnpci-senior-leader-information-security"}]}