Chief Information Security Officer

Job Description

Role & responsibilities

• Leading the development and implementation of the Company's information security strategy.
• Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.
• Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.
• Identifying and mitigating security risks, ensuring the organization remains resilient against emerging threats.
• Ensuring the Company's compliance with industry standards and regulations.
• Managing security audits, compliance assessments, incident response processes, and investigating security breaches.
• Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.
• Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.
• Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.
• Manage the security architecture, tools, and technologies deployed across the organization's IT infrastructure.
• Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws, such as IRDA Cyber Laws, RBI, CERT-IN, Meity, DDPA.
• Monitor security metrics and report on the organization's security posture to executive leadership.
• Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization.
• Stay updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.

Preferred candidate profile

• Bachelors degree in Information Security, Computer Science, or a related field.
• 6+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.
• Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001,DDPA), and risk management practices.
• Working knowledge of security auditing, vulnerability assessments, and risk mitigation.
• Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, DLP, and encryption protocols.
• Solid knowledge of data privacy regulations and compliance requirements.
• Ability to develop and implement complex security strategies.
• Strong leadership and communication skills, with the ability to influence decision-making at the executive level.
• Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.
• Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.
• Experience with cloud security and securing cloud infrastructure & SAAS platforms.
• Familiarity with incident management and disaster recovery planning.
• Knowledge of ethical hacking and penetration testing techniques.
• Background in regulatory compliance and data privacy laws in the industry.
• Hands-on experience with SIEM tools, firewalls, DLP and intrusion detection systems.
• Expertise in secure software development and Dev Sec Ops practices.
• Understanding of artificial intelligence and machine learning applications in security.

More Info

Education