Chief Information Security Officer

Job Role:

• Align security initiatives with overall business objectives and translate complex technical risks into financial impacts for the board of directors.
• Conduct continuous risk assessments, oversee governance and compliance with various regulations (e.g., DPDP Act, IT Act), and timely closure of security audits (Cyber, CSCRF, VAPT, ACCP, etc.) and submission to RBI, SEBI, AMFI, BSE, NSE (as applicable).
• Lead the organization's response to security breaches, coordinating containment, forensic investigation, and public/regulatory notifications.
• Develop, implement and review all existing IT and Security policies to ensure strong adherence to mandatory regulations. Guide the company to strategically incorporate non-mandatory policies (thus optimize costs) while keeping customer interest at forefront.
• Conduct employee awareness trainings. Ensure IT systems (internal and 3rd party), people process comply with the policies.
• Identification (VAPT, App Scans) & resolution of System Vulnerabilities. This includes front end (websites/apps), backend (server hardening / updates), network (firewall / switches) and endpoints (anti-virus, port access, software installation, data back-up, etc.).
• Creation / update of Security Policies (Info Sec, CCMP, CSCRF) and driving Security Incident Response.
• Further be able to refine the above policies in alignment with the DPDP Act.

Requirement:

• 15+ years of experience in information security, IT management, or risk management, preferably in Finance / FinTech sector. Exposure of LDAP, IAM, IDS, IPS, ALB systems as well as SOC / NOC is desirable.
• A Bachelor’s degree in Information Technology, or a related field.
• Certified in one / more of Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).
• Deep understanding of business operations, budget management, and vendor negotiations.