Information Security Compliance Manager (India)

ABOUT THE ROLE:

As an Information Security Compliance Manager, you will be a seasoned information security and risk professional with unrivalled expertise in the Indian regulatory landscape for financial institutions. You excel at managing regulatory requirements, confidently representing Tide to local regulators, and ensuring compliance with mandatory security and data standards for Tide's India operations.

Core responsibilities will include:

• Primary Regulatory Liaison: Acting as the primary point of contact and representative for Tide Risk and Compliance when interacting with Indian financial regulators (e.g., RBI, CERT-IN) and key local partners on information security topics.
• Regulatory Compliance Ownership: Owning and ensuring Tide's compliance with all applicable Indian regulatory requirements and guidelines related to information security (e.g., RBI Master Directions, Data Localisation requirements, Payment Security Standards).
• Local Standards Definition: Acting as a subject matter expert to define and enforce local information security standards specific to the Indian regulatory and operational environment.
• Audit Management (Regulatory): Leading and facilitating all regulatory-specific audits in India, including the RBI Systems Audit Report (SAR), Data Localisation audits, and any other mandated external assessments.
• Regulatory Risk Management: Managing information security risk within the India context, specifically interpreting and applying Indian regulatory risk management requirements to Tide's operations.
• Reporting to Regulators & Leadership: Preparing and presenting regular, comprehensive reports on security posture, risk status, and compliance efforts to Tide India Senior Leadership, key partners, and regulatory bodies as required.
• Regulatory Intelligence: Proactively monitoring the Indian financial sector for new or changing regulatory and compliance developments pertaining to information security and advising leadership on necessary preparations or changes.
• Second Line of Defence: Operating as part of the Second Line of Defence (2LOD), providing independent oversight and challenge on the effectiveness of information security controls against Indian regulatory mandates.

WHAT WE ARE LOOKING FOR:

• 7+ years experience in information security risk and compliance, with a heavy focus on the Indian financial sector.
• Mandatory, demonstrable experience interacting with financial regulators and government agencies in India (RBI, CERT-IN).
• In-depth, current knowledge of RBI Master Directions, data protection regulations (including PII/sensitive data handling), and payment security standards applicable to the Indian market.
• Proven experience in successfully managing and responding to regulatory audits, particularly the RBI SAR.
• Exceptional communication and presentation skills required for engaging with regulators and senior management.
• Relevant certifications such as CISM, CISA, or CRISC are strongly preferred.

WHAT YOU'LL GET IN RETURN:

Our location-specific employee benefits are designed to cater to the unique needs of Tideans:

• Competitive Salary
• Self & Family Health Insurance
• Term & Life Insurance
• OPD Benefits
• Mental wellbeing through Plumm
• Learning & Development Budget
• 15 days of Privilege leaves
• 12 days of Casual leaves
• 12 days of Sick leaves
• 3 paid days off for volunteering or L&D activities