About Us
SBI Card is a leading pure-play credit card issuer in India, offering a wide range of credit cards to cater to diverse customer needs. We are constantly innovating to meet the evolving financial needs of our customers, empowering them with digital currency for seamless payment experience and indulge in rewarding benefits. At SBI Card, the motto 'Make Life Simple' inspires every initiative, ensuring that customer convenience is at the forefront of all that we do. We are committed to building an environment where people can thrive and create a better future for everyone.
SBI Card is proud to be an equal opportunity & inclusive employer and welcome employees without any discrimination on the grounds of race, color, gender, religion, creed, disability, sexual orientation, gender identity, marital status, caste etc. SBI Card is committed to fostering an inclusive and diverse workplace where all employees are treated equally with dignity and respect which makes it a promising place to work.
Join us to shape the future of digital payment in India and unlock your full potential.
What’s in it for YOU
- SBI Card truly lives by the work-life balance philosophy. We offer a robust wellness and wellbeing program to support mental and physical health of our employees
- Admirable work deserves to be rewarded! We have a well curated bouquet of rewards and recognition program for the employees
- Dynamic, Inclusive and Diverse team culture
- Gender Neutral Policy
- Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
- Commitment to overall development of an employee through comprehensive learning & development framework
Role Purpose
Strengthen API security by governing and enhancing security controls for safe consumer access.Ensure robust secrets and API key protection through centralized management using Fortanix.Improve software supply‑chain transparency and compliance through effective SBOM management. Reduce application risk by driving proactive vulnerability detection and remediation with Fortify. Embed DevSecOps practices to integrate security into development workflows and accelerate secure delivery.
Role Accountability
- Security Governance:
- Owner of implementing and maintaining robust security controls on API platform to protect APIs, ensuring secure access, compliance, and risk reduction.
- Guardrails for APIs used in AI solution:
- Owner for defining, designing & implementing robust guard rails for API to be used in AI use case implementation to ensure protection of Data, ensuring secure access, compliance, and risk reduction.
- Fortanix Secrets & API Key Management:
- Accountable for enforcing centralized governance of API keys, secrets, and tokens through Fortanix, including lifecycle management, rotation, and audit readiness.
- SBOM Oversight & Compliance:
- Accountable for establishing and governing SBOM processes to ensure full visibility of software components and supply‑chain risks.
- Accountable for end‑to‑end SBOM platform management, including configuration, integration with CI/CD pipelines, tool maintenance, and ensuring consistent adoption across engineering teams
- Fortify Vulnerability Management:
- Accountable for driving proactive vulnerability detection, triage, and remediation using Fortify tool
- Accountable for managing the Fortify platform, including onboarding applications, maintaining integrations, optimizing scanning workflows, and ensuring platform reliability and performance.
- DevSecOps Integration & Enablement:
- Lead embedding of security into CI/CD pipelines across the enterprise, automating controls, and enabling development teams to adopt secure‑by‑design practices across the SDLC.
-
SOA goveranance: Person will be responsible for SOA goveranance and hence lifecycle of webservice. He will be responsible for creating, maintaining and publishing service catalogue of all services. He will ensure that business rules are consolidated at one place and not duplicated and services created are reusable and non redundant
Measures of Success
- Measurable reductions in API‑related risks and zero critical security incidents for API platform
- Adoption of API security technologies such as Fortanix KMS, Fortify SBOMs etc
- Security controls, automation, and guardrails are integrated into development workflows, resulting in faster, more secure releases and improved developer adoption of secure‑by‑design practices.
- Demonstrated leadership in team collaboration, problem-solving, and adaptability to industry trends.
Technical Skills / Experience / Certifications
- Expertise in API Security Standards, Service Oriented Architecture, Web Service repository, SOA-based services, SOAP, REST, WSDL.
- Hands on experience in Oracle Fusion 11g SOA stack and Google APIgee stack
Competencies critical to the role
- Expertise in Functional and Technical understanding of Digital Applications and APIs
- Good Project Management skills
- Good Communication Skills
- Good Team management skills
- Strong analytical skills - strong problem solving skills, communicates in a clear and succinct manner and effectively evaluates information / data to make decisions; anticipates obstacles and develops plans to resolve
- Demonstrated customer focus - evaluates decisions through the eyes of the customer; builds strong customer relationships and creates processes with customer viewpoint
- Stakeholders management - You need to effectively manage business and IT stakeholders through regular reviews and effective communication. You need to play as a strong team-member who can collaborate and lead large to midsized deliveries
- Strong team player - The role entails working with multiple teams hence the candidate would need to display inclusiveness to lead as well as take the team along the life of the Program. Collaborates well with others to solve problems and actively incorporates input from various sources
- Researcher Quick Learner - Person needs to be up to speed with the current trends in industry for digital IT solutions. Should be able to learn quickly and take necessary adaptation as required.
Qualification
- B.E, Btech,
- MBA (Systems), MCA is preferable
Preferred Industry
Banking and Financial Services
