Information Security Manager

About the Company
Vymo is transforming how financial institutions manage their distribution networks andcollections operations. Our AI-powered Distribution Management System (DMS) and CollectionManagement System (CMS) platform is trusted by 350,000+ users across 70+ global financialenterprises. We enable banks and insurers to optimize performance across their distributionchannels and drive operational excellence in collections.
Why Global Leaders Choose Vymo
Vymo partners with financial institutions through a comprehensive solution that combines deepdomain expertise with cutting-edge technology. Our platform's human-centric design, coupledwith enterprise-grade scalability and AI-powered intelligence, delivers measurable businessoutcomes while ensuring high user adoption and engagement.
Recognition & TrustFunding: Backed by $45M+ from leading investors, including Peak XV partners(formerly Sequoia), Emergence Capital, and Bertelsmann Investments.Clients: Trusted by global financial leaders such as Berkshire Hathaway, AIA, AXA, SBILife, HDFC Bank, Aditya Birla Capital, Tata AIA, and ABSLI.Industry Recognition:Recognized by Celent in their 2024 Distribution Management Solutions report(Advanced Functionality ranking).Featured in Gartner's Market Guide for Sales Engagement Applications.Recognized as a "Strong Performer" in Forrester's Sales Engagement WaveReport.Recipient of the Microsoft 'AI for All' award for innovation in artificial intelligence.
Explore Vymo at vymo.com
Product EvolutionThe evolution of Vymo's product can be divided into three strategic phases:
Lead and Activity Management: Providing a mobile-first tool for large enterprises withdistributed field sales teams to digitize processes and gain real-time visibility into teamproductivity.Sales Engagement Platform: Building advanced capabilities (nudges, goals,playbooks, performance dashboards) to improve business outcomes for financialinstitutions.Distribution Management Platform (Current Phase): Consolidating the tech stack forfinancial institutions. Our long-term vision is to become an insurance "core system" byowning the end-to-end advisor life cycle, encompassing recruitment, onboarding,training, selling, engagement, and performance management.
About the RoleJD - Manager – Information Security
About the Role: We are seeking an Information Security Leader to operate at the intersection of technology,compliance, and customer trust. This is a highly visible, external-facing role where you willrepresent our security posture to enterprise clients in highly regulated sectors (banking,insurance, financial services).
Responsibilities
Key Responsibilities
You will partner closely with an external strategic security firm and be responsible for translating complex security requirements into clear, actionable commitments, both internally and externally.
What You'll Do
Customer Engagement & Trust
Primary Contact: Serve as the main security point of contact for enterprise customersduring procurement, contract negotiations, and periodic security reviews.Security Representation: Lead all customer-facing security discussions, including RFPresponses, vendor risk assessments, and security questionnaires.Build Credibility: Establish and maintain strong security credibility with CISOs, Risk,and Compliance teams at client organizations.Audit Management: Represent Vymo's security posture in customer-initiated audits,due diligence processes, and regulatory inquiries.
Compliance & Risk Management
Framework Ownership: Own and manage critical compliance frameworks relevant toregulated industries (e.g., DPDP Act, ISO 27001, SOC 2, RBI/IRDAI guidelines).Risk Mitigation: Conduct and oversee risk assessments, gap analyses, andremediation planning.Contractual Security: Maintain Data Processing Agreements (DPAs), securityschedules, and contractual security obligations with enterprise clients.Regulatory Monitoring: Proactively monitor the evolving regulatory landscape acrosskey customer segments and update internal controls accordingly.
Cloud & Technical Security
Security Architecture: Oversee the security architecture and posture of our cloudinfrastructure (AWS/GCP/Azure), focusing on access controls, data encryption, networksegmentation, and logging.Security in SDLC: Partner with engineering and DevOps teams to embed security intothe Software Development Life Cycle (SDLC), CI/CD pipelines, and product releases.Proactive Security: Lead vulnerability management, penetration testing programs, andincident response planning.Tooling: Manage and optimize security tooling, including SIEM, endpoint protection,identity management, and data loss prevention.
Strategic Partnership & Internal Leadership
Security Roadmap: Work with the external strategic security partner to design andexecute the company's long-term security roadmap.Execution: Translate strategic guidance into prioritized internal execution plans fortechnical teams.Team Building: Build and mentor a small internal security function as the companyscales.Internal Liaison: Work closely with engineering teams to address reported issues,follow up on corrective actions, and report status to stakeholders, including clients andinternal partners.Vendor Management: Evaluate security software tools and vendors, conductingTCO/pros/cons analysis to make informed implementation and onboarding decisions.Reporting: Report to senior leadership on key security performance indicators (KPIs),risk posture, and compliance status.
Qualifications
Requirements
Experience
Core Experience: 8–12 years in information security, with at least 3 years in a manager or leadership role.Industry Preference: Prior experience in a B2B SaaS company or technology vendor serving regulated industries is highly preferred.Focus: Demonstrated experience in customer-facing security roles—not solely internal security operations.Technical: Hands-on experience with cloud security (AWS, GCP, or Azure) andfamiliarity with cloud-native security tools.
Knowledge & Skills
Compliance Expertise: Deep understanding of compliance frameworks relevant to BFSI, including DPDP, ISO 27001, SOC 2 Type II, RBI Master Directions, and IRDAI guidelines.Risk Management: Strong grasp

Skills
AWS, Azure, GCP, CI/CD, Artificial Intelligence, Risk Management, Onboarding, Procurement, Vendor Management, Due Diligence

Experience
8-12 yrs

Work arrangement
No