Vistaar Financial Services - Data Protection Officer - Information Security

Description

Key Requirements :

• Strong expertise in Information Security Governance, including deep knowledge of security frameworks, standards, policies, and best practices.
• Proven understanding of IT infrastructure, application architectures, and enterprise technology environments.
• Hands on experience in Data Privacy and Regulatory Compliance, including practical understanding of DPDPA, data protection controls, privacy impact assessments, and privacy by design principles.
• Exposure to DPO related responsibilities is an advantage.
• Proficiency in IT Governance, Risk and Compliance (ITGRC), with strong capabilities in IT risk management, technology risk assessment, control design, policy drafting, and continuous controls monitoring.
• Strong understanding of the cyber threat landscape, including cyber threat intelligence lifecycle, analysis frameworks, and familiarity with threat actors and their TTPs particularly within the Indian BFSI/NBFC ecosystem.
• Experience in regulatory engagement, with proven ability to interact with regulators and external auditors on information security, privacy, IT audit, and compliance matters.
• Professional certifications such as CISA, ISO 27001 Lead Auditor, or equivalent credentials in IT Audit, IT Risk Management, or Information Security are highly desirable.
• Strong partner orientation, with the ability to collaborate effectively with board members, business leaders, clients, and internal teams while balancing security risks and business priorities.
• Ability to articulate a clear security and privacy strategy.
• High level of risk awareness, with a proactive approach to identifying emerging technological and cyber risks, and the confidence to make informed decisions with clarity and conviction.
• Strong alignment with Vistaar Financial Services values and commitment to maintaining ethical standards, trust, and organizational integrity.
• Good understanding of NBFC and BFSI business models, ensuring that information security, data privacy, and technology risk practices are effectively aligned with business objectives and regulatory requirements.

(ref:hirist.tech)