Information Security Compliance Manager (India)

As an Information Security Compliance Manager, you will be a seasoned information security and risk professional with unrivalled expertise in the Indian regulatory landscape for financial institutions. You excel at managing regulatory requirements, confidently representing Tide to local regulators, and ensuring compliance with mandatory security and data standards for Tide’s India operations.

Responsibilities

Primary Regulatory Liaison: Acting as the primary point of contact and representative for Tide Risk and Compliance when interacting with Indian financial regulators (e.g., RBI, CERT-IN) and key local partners on information security topics; Regulatory Compliance Ownership: Owning and ensuring Tide’s compliance with all applicable Indian regulatory requirements and guidelines related to information security (e.g., RBI Master Directions, Data Localisation requirements, Payment Security Standards); Local Standards Definition: Acting as a subject matter expert to define and enforce local information security standards specific to the Indian regulatory and operational environment; Audit Management (Regulatory): Leading and facilitating all regulatory-specific audits in India, including the RBI Systems Audit Report (SAR), Data Localisation audits, and any other mandated external assessments; Regulatory Risk Management: Managing information security risk within the India context, specifically interpreting and applying Indian regulatory risk management requirements to Tide's operations; Reporting to Regulators & Leadership: Preparing and presenting regular, comprehensive reports on security posture, risk status, and compliance efforts to Tide India Senior Leadership, key partners, and regulatory bodies as required; Regulatory Intelligence: Proactively monitoring the Indian financial sector for new or changing regulatory and compliance developments pertaining to information security and advising leadership on necessary preparations or changes; Second Line of Defence: Operating as part of the Second Line of Defence (2LOD), providing independent oversight and challenge on the effectiveness of information security controls against Indian regulatory mandates

Requirements

7+ years experience in information security risk and compliance, with a heavy focus on the Indian financial sector; Mandatory, demonstrable experience interacting with financial regulators and government agencies in India (RBI, CERT-IN); In-depth, current knowledge of RBI Master Directions, data protection regulations (including PII/sensitive data handling), and payment security standards applicable to the Indian market; Proven experience in successfully managing and responding to regulatory audits, particularly the RBI SAR; Exceptional communication and presentation skills required for engaging with regulators and senior management

Nice to have

CISM; CISA; CRISC

Benefits

Competitive Compensation; Time Off – Generous annual leave on top of bank holidays; Parental Leave – Paid maternity, paternity, and adoption leave; Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide; Health Insurance – Private family insurance with additional OPD coverage and top-up options; Life & Accident Cover – Comprehensive accidental and life insurance protection; Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops; Volunteering & Development Days – Paid days annually for volunteering or personal growth; Learning & Development – Annual budget for books, courses, coaching, and more; WOO (Work Outside the Office) – Work from abroad for up to 90 days annually; Home Office Setup – Contribution towards setting up home office; Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement; Snacks & Meals – Office perks with snacks, coffee, tea, and lunch