Business Information Security Expert, Finance

Overview

Act as a trusted Information Security adviser and business partner for a portfolio of Finance applications, platforms and initiatives, working with Finance, DD&IT, application owners, project teams and Information Security specialists.

What you'll do

• Provide Information Security guidance and oversight for assigned Finance applications, platforms and initiatives throughout their lifecycle.
• Identify, assess and communicate material security risks, vulnerabilities, control gaps and policy exceptions, helping stakeholders prioritize and drive appropriate remediation.
• Engage with projects and significant application changes to ensure security requirements are considered early and appropriately incorporated into solutions.
• Provide guidance on identity and access management, privileged access, sensitive information, data protection and application integrations.
• Identify and help manage security risks associated with vendors, technology providers and externally delivered services.
• Support security-related assurance, audit and compliance activities and help application teams address identified gaps.
• Recognize when specialist expertise is required, engage the appropriate Information Security or Cybersecurity teams and translate their findings into practical actions.
• Build strong relationships across Finance, DD&IT and Information Security, constructively challenging where necessary while helping stakeholders achieve business objectives securely.
• Translate complex security matters into clear business impact, recommendations and decisions.
• Identify recurring risks and systemic weaknesses across the portfolio and help improve security governance and ways of working.

What you'll need

• 8+ years of experience with strong understanding and knowledge of enterprise Information Security and Cybersecurity, with experience in compliance, governance and controls aspects.
• Ability to assess risk across applications, infrastructure, cloud, identity, data, AI tools and third parties.
• Strong analytical, investigative and critical-thinking skills, pragmatic proportionate and risk-based decision-making.
• Ability to rapidly understand unfamiliar technologies, companies and business environments, and judgement to distinguish material risk from technical noise.
• Confidence making recommendations when information is incomplete, ambiguous or evolving.
• Excellent written, verbal and executive communication skills, with strong stakeholder-management and influencing capabilities.
• Ability to work autonomously while knowing when specialist expertise or escalation is required.
• Intellectual curiosity, ability to learn quickly and comfort operating in fast-moving, complex environments.

Nice to have

• Experience in Finance technology, enterprise applications, SAP, security governance, technology risk, audit and assurance, cloud security, identity and access management, third-party risk or another regulated environment.

Details

• Location: Hyderabad, India.
• Hybrid work mode.
• Internal job title: Associate Director DDIT ISC FM&A Compliance.