Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

For Employers

Premium Employer

Tide - Business Management Platform

Compare

3.8

based on 135 Reviews

84 Tide - Business Management Platform Jobs

Information Security Risk Lead

Tide Software

3.8

based on 135 Reviews

1-6 years

New Delhi

1 vacancy

Information Security Risk Lead

Tide - Business Management Platform

posted 3mon ago

Job Role Insights

Flexible timing

Key skills for the job

Recruitment German Risk Management Information Security Cisa ISO 27001 Lead Auditor

+ 4 more

Job Description

Interacting with 3rd party stakeholders such as partners and regulators, on behalf of Information Security.
Defining Tide s India-specific information security programme in alignment with its global ISMS.
Acting as a thought leader in the context of local information security requirements.
Managing information security risk in accordance with Tide s Global Risk Management Framework Indian Regulatory requirements.
Managing and improving Tide s Information Security Management System (ISMS) .
Working with 1LOD stakeholders across the business in order to deliver information security risk reduction projects.
Ensuring alignment with industry recognised information security control frameworks.
Conducting information security risk assessments and control testing.
Defining and measuring key risk indicators, and using data from modern information security tooling to develop insightful risk reporting.
Facilitating external audit requirements, and working with stakeholders across 1LOD and 3LOD to close information security audit findings.
Reinforcing a strong security culture and awareness message throughout the business.
Define, track, and report key risk indicators (KRIs) and metrics related to information security within the PPI environment.
Prepare and present regular reports on security posture, risk status, and compliance efforts to senior management, audit committees, and regulatory bodies as required.
Ensuring Tide s compliance with all applicable regulatory requirements, and keeping abreast of new regulatory and compliance developments.

WHAT WE ARE LOOKING FOR:

You have a minimum of 10 years experience working in information security GRC (governance, risk compliance) related roles
You have experience interacting with financial regulators and government agencies in India (e.g. RBI, CERT-IN)
You have experience working at or on behalf of a financially regulated organisation
You have experience working at or on behalf of a technology-first organisation
You ve implemented, maintained and supported an ISO 27001 program
You ve implemented, maintained and supported a PCI DSS compliance program
You have experience with security control frameworks such as the ISO 2700 series, NIST CSF, CIS Critical Security Controls, etc.
You have experience with audits applicable to information security such as ISO 27001, Systems Audit Report (SAR), SOC2, etc.
You ve performed information security risk assessments and/or control testing
You have good technical knowledge in the field of information security
You have led information security risk reduction projects
In-depth knowledge of payment security standards (PCI-DSS), data protection regulations, incident response, and risk management frameworks.
Relevant certifications such as CISSP, CISM, CISA, or PCI Professional (PCIP) are strongly preferred.