Information Security Manager

Company Overview:

Online PSB Loans is a digital credit infrastructure company focused on automating and digitizing lending for both borrowers and lenders. It aims to solve challenges in credit distribution for MSMEs and retail borrowers. The company is expanding its digital footprint and diversifying into various industry segments.

Website: https://www.opinnovate.com

Location: Ahmedabad (on-site)

Position: Manager Information Security

Experience: 1-3 years of experience in Information Security or IT Risk Management (internship/project experience acceptable).

Job Summary:

We are seeking a motivated and detail-oriented Manager to join our Information Security & IT Risk Management team. This role is ideal for professionals with foundational experience in cybersecurity and IT

risk who are eager to grow in a dynamic environment. You will assist in risk assessments, compliance activities, and implementation of security policies to safeguard organizational assets and ensure

regulatory compliance.

Responsibilities:

Direct Responsibilities:

• Assist in performing information security risk assessments for applications, infrastructure, and changes.

• Support identification and tracking of IT security risks and remediation actions.

• Prepare and maintain risk assessment reports and dashboards for management review.

• Collaborate with IT, SOC, and business teams to facilitate risk mitigation.

• Help implement and monitor compliance with ISMS policies, risk frameworks, and procedures.

• Assist in reviewing SOC operations and contribute to creating Standard Operating Procedures (SOPs).

• Support internal and external audit processes from an information security perspective.

• Coordinate and monitor completion of periodical and on-demand security reviews for new and existing applications, IT systems.

• Review VAPT process and reporting

Contributing Responsibilities:

• Provide basic consultation on security, best practices and policy adherence.

• Assist in evaluating security approval processes for application and infrastructure changes.

• Participate in audits for compliance with Information Security, Cybersecurity, and Data Privacy regulations.

• Support documentation and process preparation for ISO certifications (ISO 27001, ISO 22301, ISO 27701, ISO 42001).

• Contribute to IT compliance checklists and self-assessments (e.g., UIDAI).

• Assist in preparing agenda notes for Risk Management Committees.

• Ensure incident response procedures and practices

Required Skills & Competencies:

• Basic understanding of application and infrastructure security concepts.

• Familiarity with Cybersecurity frameworks, Data Privacy laws, and IT risk principles.

• Exposure to risk assessment for network, cloud, and endpoint security.

• Awareness of emerging technologies (AI, FinTech, Mobile, Virtualization, etc.).

• Strong analytical, documentation, and communication skills.

• Ability to work independently and collaboratively with integrity and discretion.

Qualifications & Experience:

• Bachelors degree in IT, Computer Science engineering, or related field.

Preferred Certifications:

• CompTIA Security+, ISO 27001 Lead Implementer/Lead Auditor, CISM, CISA, CISSP.

Key Performance Indicators (KPIs):

• Risk Assessment Completion Rate Timely completion of scheduled risk assessments.

• Compliance Score Audit results reflecting adherence to ISMS and regulatory standards.

• Audit Support Efficiency Accuracy and timeliness of documentation for audits.

• Policy Implementation & Review Number of policies reviewed and updated as per schedule.

• Security Review Turnaround Time Average time taken to complete security reviews.

• Incident Response Support Contribution to timely resolution of security incidents.

• Training & Awareness Contribution Participation in security awareness initiatives.

• Reporting Accuracy Quality and timeliness of risk reports and dashboards.

• Continuous Improvement Initiatives Number of process improvement suggestions implemented.

• Stakeholder Collaboration Effectiveness in coordinating with IT, SOC, and business teams.