Chief Information Security Officer - BFSI

Role Overview:

We are looking for an experienced Chief Information Security Officer (CISO) to lead the Information Security and Cybersecurity agenda across a large, technology-driven financial services ecosystem. The role will be responsible for providing strategic leadership, governance and oversight for information security, ensuring alignment with business objectives, regulatory expectations and the evolving cyber threat landscape.

Key Responsibilities:

- Define and drive the Information Security and Cybersecurity strategy.

- Lead the development and implementation of enterprise-wide security governance, policies, frameworks and standards.

- Oversee the information security risk management, cyber resilience and security maturity.

- Provide strategic direction and oversight across the organisation's information security function and related initiatives.

- Partner with senior leadership, technology, risk, compliance, audit and business teams on security and cyber risk matters.

- Ensure appropriate preparedness for regulatory requirements, audits and evolving cybersecurity threats.

- Provide leadership during significant information security and cybersecurity events.

- Establish appropriate governance and oversight across the businesses and entities.

- Build and lead a high-performing Information Security organisation aligned with the Group's growth and transformation agenda.

Candidate Profile:

- 14+ years of experience in Information Security, Cybersecurity, Technology Risk or related domains.

- Proven experience in senior leadership roles managing enterprise or group-level security functions.

- Experience in BFSI, FinTech, Payments, Digital Financial Services or other highly regulated industries preferred.

- Experience working across large, complex, technology-driven organisations and multiple business entities.

- Strong experience in executive, Board and senior stakeholder engagement.

- Strong understanding of enterprise security, cyber risk, governance and regulatory requirements.

Education:

- Bachelor's/Master's degree in Technology, Engineering, Computer Science, Information Security or a related discipline. Relevant certifications such as CISSP, CISM, CISA, CRISC or equivalent will be preferred.