Lead - Information Security & SecOps
Lead Payswiff's information security and SecOps function from its Hyderabad office: running SIEM/SOAR-driven monitoring, incident response, security automation, vulnerability management, and cloud/infrastructure security while managing a technical security team and ensuring PCI DSS, ISO 27001, and RBI compliance.
- Compensation
- Not disclosed
- Location
- Hyderabad
- Work setup
- Onsite
- Seniority
- Lead
- Employment
- Full time
- Experience
- 12+ years
- Category
- Security
- Posted
Skills
Must have
- 10+ years in Information Security, Cybersecurity, Security Operations, and Infrastructure Security
- Minimum 5 years in a leadership or team management role
- Hands-on experience managing SIEM and SOAR platforms
- Expertise in Security Operations, Threat Detection, Security Monitoring, and Incident Response
- Strong experience in Cloud Security and Infrastructure Security
- Experience in Vulnerability Management, Security Risk Assessment, and Risk Treatment
- Experience in Security Automation and integration of security tools and platforms
- Strong knowledge of Network Security, Endpoint Security, IAM, and Privileged Access Management
- Experience conducting technical third-party security assessments
- Understanding of PCI DSS, ISO 27001, and RBI security requirements (technical control implementation)
- Proven experience leading and managing technical security teams
- Excellent stakeholder management, communication, and leadership skills
Nice to have
- CISSP certification
- CISM certification
- CCSP certification
- CEH certification
- GIAC certifications
- Cloud security certifications
- SIEM/SOAR vendor certifications
Full description
Lead Information Security & SecOpsCompany: Payswiff Technologies
Job Location: Hyderabad
Work Mode: Work From Office (WFO)
Experience: 10–15 Years
Employment Type: Full-Time
Department: Information Security / Cybersecurity
Job Summary
Payswiff Technologies is looking for an experienced Lead – Information Security & SecOps to drive the organization's Information Security strategy, Security Operations, Cybersecurity risk management, infrastructure security, cloud security, and technical security assurance functions.
The role will be responsible for strengthening the overall security posture, managing SIEM/SOAR platforms, driving security automation, overseeing threat detection and incident response, and ensuring effective vulnerability and security risk management.
The ideal candidate should possess strong technical expertise in Security Operations, Cloud Security, Infrastructure Security, SIEM/SOAR, Incident Response, Vulnerability Management, and Security Risk Assessment, along with proven leadership experience in managing technical security teams.
The candidate will work closely with Infrastructure, Cloud, DevOps, Engineering, and GRC teams to implement and maintain effective security controls aligned with PCI DSS, ISO 27001, RBI, and other applicable regulatory requirements.
Key Responsibilities1. Information Security Strategy & Risk Management
- Drive the organization's Information Security strategy, roadmap, and security improvement initiatives.
- Conduct security posture assessments and identify security gaps.
- Lead technical security risk assessments across infrastructure, cloud, applications, and business systems.
- Define risk mitigation plans, maintain technical risk registers, and track remediation.
- Establish security KPIs, KRIs, and management reporting.
2. Security Operations (SecOps)
- Lead Security Operations, including security monitoring, threat detection, investigation, and incident response.
- Manage and optimize SIEM and SOAR platforms.
- Develop detection rules, correlation logic, security use cases, and alerting mechanisms.
- Establish incident response playbooks and escalation procedures.
- Integrate threat intelligence and drive proactive threat detection.
3. Security Automation
- Drive automation across security monitoring, alert triage, incident response, and vulnerability management.
- Integrate SIEM, SOAR, vulnerability management, and cloud security platforms.