Cybersecurity & Regulatory Compliance Specialist Capital Markets

Role Summary: We are looking for a cybersecurity and regulatory compliance specialist to support capital markets operations, with a strong focus on international clients, Foreign Institutional Investors (FIIs), and the wider securities market ecosystem. The role will blend capital markets regulatory, client governance, CSCRF compliance, cyber resilience, control assurance, and security project responsibilities across technology platforms, infrastructure, applications, vendors, and business stakeholders. The individual will be responsible for driving cybersecurity governance, audit readiness, incident reporting, regulatory coordination, and client-facing assurance obligations in a highly sensitive and regulated environment.Scope of Coverage: The specialist will work across the capital markets ecosystem, including FIIs, FPIs, brokers, custodians, clearing and settlement interfaces, exchanges, depositories, market infrastructure institutions, technology service providers, outsourcing partners, and internal IT, Security, Risk, Compliance, Legal, Operations, and Audit stakeholders.Role Alignment and Operating ContextThe role will combine capital markets regulatory compliance, international client governance, CSCRF readiness, FII/FPI ecosystem coordination, and client-facing assurance activities.The role will require close coordination with Security, Risk, Compliance, Operations, Audit, client-servicing teams, external auditors, regulators, international client stakeholders.Communication, Integrity and Professional AttributesExcellent spoken and written English communication skills, with the ability to interact confidently and professionally with international clients, auditors, regulators, senior management, and cross-functional stakeholders.Strong ability to draft clear client responses, regulatory updates, audit clarifications, meeting notes, compliance summaries, dashboards, and executive-level status reports.High level of integrity, discretion, and professional maturity, given the roles exposure to sensitive data, regulatory information, security findings, incident details, and confidential business information.Pragmatic, solution-oriented, and commercially aware mindset with the ability to navigate ambiguity, coordinate with multiple stakeholders, follow through assertively, and drive actions to closure with minimal supervision.Strong ownership mindset, attention to detail, responsiveness, and ability to balance regulatory discipline with business and client-service expectations.Key ResponsibilitiesLead and manage end-to-end execution of SEBI CSCRF compliance assessments for Foreign Institutional Investors (FIIs), including stakeholder coordination, regulatory communication, control assessment, evidence validation, compliance monitoring, and audit readiness activities.Prepare and maintain audit-ready documentation, facilitate internal, external, and regulatory audit engagements, address auditor queries, and track compliance status, observations, remediation plans, and closure activities.Act as a client-facing cybersecurity and compliance representative for international clients, ensuring timely, clear, and professional communication on CSCRF readiness, audit responses, security controls, incident updates, and regulatory compliance matters.Conduct security assessments of critical technology assets, including Network and Security Infrastructure Devices, Endpoints and Servers, Business Applications and Supporting Environments.Review and validate Security Information and Event Management (SIEM) log integration and monitoring coverage to ensure adequate visibility across critical systems and security controls.Analyse and maintain cybersecurity risk and assurance artefacts, including assessment reports, audit findings, remediation trackers.Ensure compliance with SEBI CSCRF requirements and other applicable regulatory circulars, standards, and cybersecurity obligations.Handle sensitive client, security, and regulatory information with strict confidentiality, integrity, and adherence to internal information security and data protection requirements.Required Domain ExpertiseStrong working knowledge of SEBI CSCRF, SEBI cybersecurity circulars, CERT-In requirements, RBI/SEBI cyber expectations, ISO 27001, NIST CSF, CIS Controls, and industry cyber resilience practices.Deep understanding of capital markets operations, including trading, clearing, settlement, custody, FII/FPI onboarding, client reporting, third-party connectivity, and regulatory submissions.Hands-on experience in cybersecurity governance, risk assessment, control testing, audit coordination, vulnerability management, and regulatory compliance monitoring.Ability to interpret regulatory circulars, translate them into actionable controls, prepare compliance roadmaps, and coordinate implementation across technology and business teams.Experience working with international clients, global control expectations, cross-border data considerations, outsourcing .