Information Security Compliance Manager
Tide is a UK business-banking fintech for small and medium enterprises (tide.co), a Speedinvest portfolio company.
About Tide
Tide is a UK financial-technology company providing business banking and financial services to small and medium enterprises (tide.co). It is a portfolio company of Speedinvest.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will manage information security compliance for Tide’s India operations. You will serve as the primary liaison to Indian financial regulators and local partners, interpret and enforce applicable security standards, lead regulatory audits, manage regulatory risk, and report security posture and compliance status to leadership and regulators. You will monitor regulatory developments and provide independent second-line oversight of information security controls.
Requirements
- 7+ years of experience in information security risk and compliance with a focus on the Indian financial sector.
- Demonstrable experience interacting with Indian financial regulators and government agencies, including RBI and CERT-IN.
- Current knowledge of RBI Master Directions, data protection regulations, PII and sensitive-data handling, and payment security standards in India.
- Experience managing and responding to regulatory audits, particularly the RBI Systems Audit Report.
- Communication and presentation skills for engaging regulators and senior management.
- CISM, CISA, or CRISC certification is strongly preferred.
Responsibilities
- Act as the primary information security liaison with Indian financial regulators and local partners.
- Ensure compliance with applicable Indian information security regulations, data localisation requirements, and payment security standards.
- Define and enforce local information security standards for India.
- Lead regulatory audits, including RBI Systems Audit Reports and data localisation audits.
- Manage information security risk in accordance with Indian regulatory requirements.
- Prepare and present security, risk, and compliance reports to leadership, partners, and regulators.
- Monitor regulatory developments affecting information security and advise leadership on required changes.
- Provide independent second-line oversight and challenge of information security controls against Indian regulatory mandates.
Benefits
- Self and family health insurance.
- Term and life insurance.
- OPD benefits.
- Mental wellbeing support through Plumm.
- Learning and development budget.
- 15 days of privilege leave.
- 12 days of casual leave.
- 12 days of sick leave.
- Three paid days off for volunteering or learning and development activities.