Chief Information Security Officer

Designation: Chief Information Security Officer (CISO)Experience: 10–15+ years in information/cyber security, including 5+ years leading security in BFSI, broking, AMC, or depository environmentsQualification: B.E./B.Tech (CS/IT/Electronics) or equivalent; MBA/M.Tech preferredLocation: Bangalore/ChennaiAbout The RoleWe are looking for a Chief Information Security Officer to own and continuously improve FundsIndia's information/cyber security posture — spanning Board-level governance and hands-on security architecture and engineering — across broking and mutual fund distribution. The role involves securing the technology stack end-to-end, ensuring SEBI/CERT-In/AMFI compliance, protecting client data, leading incident response, and reporting to the Board and regulators on all cyber matters.Must Have (Skills/Exposures/Certifications)Prior experience as a CISO or in senior security leadership roles within BFSI, broking, AMC, or depository environments.Relevant certifications such as CISSP, CISM, CISA, ISO 27001 LA, or CEH, along with relevant NISM/SEBI certifications.Technical certifications preferred, such as OSCP, GCIH/GCFA, or a cloud security specialty certification (AWS/Azure/GCP or CCSP).Hands-on experience with cloud platforms (AWS/Azure/GCP), SIEM/SOAR, and EDR/XDR tooling.Strong working knowledge of SEBI CSCRF, SEBI (Stock Brokers) and (Mutual Funds) Regulations, AMFI, DPDP Act 2023, CERT-In directions, and frameworks such as ISO 27001/NIST CSF.Experience with secure API/microservices architecture and cryptography/key management (HSM/KMS). What You will Own.Own the Board-approved Cyber Security Policy under CSCRF, validate the applicable RE tier, and run the Board ITCommittee.Lead the SOC/incident response function, ensuring all cyber incidents are reported to SEBI;s portal and CERT-In within the mandated 6-hour window, and lead forensics, RCA, and remediation.Commission VAPT, cyber audits, CCI assessments, red-teaming/threat-hunting, and cyber drills per tier; drive ISO27001 alignment and maintain the risk register.Secure trading, back-office, CRM, and distribution platforms across network, application, cloud, and API layers, and own BCP/DR.Design and own zero-trust network segmentation, IAM/PAM, secure SDLC/DevSecOps, SIEM/SOAR detection engineering, EDR/XDR, and cryptography/key management.Protect KYC, trading, and personal data of clients per the DPDP Act 2023, and manage third-party/vendor security risk across RTA, KRA, cloud, and AMC partners.Drive security awareness training and phishing simulations across the organization.Ensure compliance with SEBI Regulation 18(5)/19, including terminal access controls and QSB obligations, and independent non-compliance reporting to exchanges.Act as the primary point of contact for SEBI, exchanges, CERT-In, and AMFI on cyber matters and inspections.Report regularly to the Board, IT Committee, and Risk ; Audit Committees on the organization’s cyber posture.What You will BringDeep technical fluency in cloud-native security, DevSecOps/secure SDLC, SIEM/SOAR, IAM/PAM, and cryptography/key management.Strong Board-reporting and crisis-management skills under regulatory time pressure.Ability to translate evolving SEBI regulation into policy, process, and controls.High integrity and independence, given direct Board and regulator accountability.Strong vendor and third-party risk management skills.A proven track record of leading cyber/information security functions in regulated financial services environments.Is This You?10–15+ years of experience in information/cyber security, including 5+ years leading security in BFSI, broking,AMC, or depository environments.Prior experience as a CISO or in senior security leadership roles is preferred.Hold relevant certifications (CISSP, CISM, CISA, ISO 27001 LA, CEH); technical certifications (OSCP, GCIH/GCFA,cloud security specialty) are a plus.Comfortable owning Board-level governance while staying hands-on with security architecture and engineering.Strong working knowledge of SEBI CSCRF, SEBI regulations, AMFI, DPDP Act, and CERT-In directions.High integrity and independence, with strong stakeholder and crisis-management skills.Based in or willing to relocate to Chennai.