Role Overview:

As the Chief Information Security Officer (CISO) for our Financial Services organization in Mumbai, you will be responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. You will collaborate closely with executive leadership, IT teams, business units, and external stakeholders to develop and implement a robust security framework that aligns with business objectives and regulatory requirements. Your leadership will directly impact the security posture of the organization, safeguarding sensitive financial data, maintaining customer trust, and ensuring business continuity.

Key Responsibilities:

- Develop and implement a comprehensive information security strategy and roadmap aligned with the organization's business objectives and risk appetite.

- Lead the development, implementation, and enforcement of security policies, standards, and procedures across the organization.

- Oversee the identification, assessment, and mitigation of information security risks, vulnerabilities, and threats.

- Manage and mentor a team of security professionals, fostering a culture of security awareness and continuous improvement.

- Ensure compliance with relevant regulatory requirements, industry standards, and legal frameworks, including RBI guidelines and data privacy regulations.

- Lead incident response efforts, including investigation, containment, eradication, and recovery, to minimize the impact of security breaches.

- Conduct regular security audits and assessments to identify gaps and weaknesses in the organization's security posture.

- Provide security awareness training and education to employees to promote a security-conscious culture.

- Evaluate and implement security technologies and solutions to enhance the organization's security defenses.

- Stay abreast of emerging security threats, vulnerabilities, and technologies to proactively address potential risks.

Required Skillset:

- Demonstrated expertise in developing and implementing information security strategies, policies, and procedures within the financial services industry.

- Proven ability to lead and manage a team of security professionals, fostering a collaborative and high-performing environment.

- Deep understanding of risk management principles, frameworks, and methodologies.

- Extensive knowledge of IT compliance requirements, including RBI guidelines, data privacy regulations (e.g., GDPR, CCPA), and industry standards (e.g., ISO 27001, PCI DSS).

- Excellent communication, interpersonal, and presentation skills, with the ability to effectively communicate complex security concepts to both technical and non-technical audiences.

- Strong analytical and problem-solving skills, with the ability to identify and resolve security issues quickly and effectively.

- Bachelor's or Master's degree in Computer Science, Information Security, or a related field; relevant certifications such as CISSP, CISM, or CISA are highly preferred.

- Ability to thrive in a fast-paced, dynamic environment and adapt to changing business needs.