Chief Information Security Officer

About the RoleThe Chief Information Security Officer will be responsible for establishing, implementing, and maintaining the organization's information security, cyber risk management, data protection, and AI governance framework. The role will ensure the confidentiality, integrity, and availability of information assets while aligning security initiatives with business objectives, regulatory requirements, and emerging technology risks.Reporting To: Chief Risk Officer

Location: MumbaiQualifications & ExperienceExperience: 6–8 years

• Master’s in technology/science/computer application. CISSP/CISA and CISM Certified. 6 to 8 years’ experience in IT and Cyber Security with large organization.Key ResponsibilitiesInformation Security & Cyber Risk Management
• Develop, implement, and continuously enhance the enterprise-wide Information Security Management System (ISMS).
• Define and execute the organization's cyber security strategy, roadmap, policies, standards, and procedures.
• Lead enterprise risk assessments and establish appropriate risk mitigation measures.
• Ensure protection of critical business applications, customer data, digital channels, and infrastructure.
• Oversee security monitoring, vulnerability management, penetration testing, threat intelligence, and incident response programs.
• Manage cyber security operations, including SOC, SIEM, endpoint protection, and cloud security controls.Regulatory & Compliance
• Ensure compliance with RBI Cyber Security Framework, Digital Lending Guidelines, Data Privacy Regulations, and other applicable regulatory requirements.
• Drive compliance with ISO 27001, NIST, PCI-DSS, and other relevant security frameworks.
• Coordinate internal and external security audits and address observations within agreed timelines.
• Present cyber risk posture, security incidents, and compliance status to senior management and Board/IT Committee.Technology Security
• Provide security oversight for application development, cloud platforms, infrastructure, and third-party integrations.
• Review and approve technology architecture from an information security perspective.
• Establish secure software development and DevSecOps practices.
• Oversee vendor risk assessments and third-party security management.AI Security & Governance
• Develop and implement an AI Governance Framework covering responsible AI usage, security, privacy, and compliance.
• Partner with business and technology teams to securely adopt AI solutions while maintaining regulatory compliance.
• Monitor emerging AI security trends, threats, and regulatory developments.Leadership & Stakeholder Management
• Work closely with business leaders to embed security into organizational processes.
• Conduct security awareness and cyber resilience programs across the organization.
• Build and lead a high-performing information security team.
• Engage with regulators, auditors, technology partners, and industry forums on security matters.Key Competencies
• Information Security Governance
• Cyber Risk Management
• Cloud & Infrastructure Security
• Security Operations & Incident Response
• AI Governance & AI Security
• RBI & Regulatory Compliance
• Stakeholder Management
• Leadership & Team Development
• Strategic Planning & Execution