Chief Information Security Officer (CISO)

Location: Mumbai, Maharashtra
Department: Security

We are seeking a Chief Information Security Officer (CISO) to lead our information security, cyber resilience, and ICT risk management efforts in India.

As the entity-level CISO, you will be responsible for ensuring cybersecurity, information technology (IT), and information & communication technology (ICT) risk, and operational resilience capabilities are effectively implemented, governed, and evidenced within the regulated entity.

Key responsibilities:

• Develop and implement security governance, risk, and compliance strategies across the security domain
• Lead complex, high-impact security governance and risk management initiatives
• Collaborate with cross-functional teams to drive security risk and governance initiatives that align with business needs and objectives
• Possess a keen awareness of the broader impact of decisions, with initiatives driving enterprise-wide improvements in risk management and security governance
• Lead a security risk and governance team; set clear priorities and define actionable plans, ensuring alignment with organisational goals
• Guide team members through complex challenges, fostering their growth and development while maintaining a focus on high-impact results

Requirements:

• 10-12 years of experience in information security, cybersecurity, ICT/IT risk, technology operations, or cyber resilience within financial services, payments, fintech, or other highly regulated technology environments
• Demonstrated experience leading cybersecurity, ICT risk, or operational resilience initiatives while partnering closely with engineering, infrastructure, cloud, and technology teams
• Strong understanding of modern technology environments, including cloud platforms, distributed infrastructure, enterprise applications, cybersecurity operations, and secure technology delivery
• Sufficient technical proficiency to provide credible oversight, assessment, and challenge across areas such as cyber and operational resilience, disaster recovery and resilience testing, incident management and response, ICT risk assessment, secure technology change, and vulnerability management
• Experience engaging with regulators, external auditors, and internal assurance functions within regulated financial services environments