Chief Information Security Officer - IT

CISO will be responsible for championing the case of IT security both internally and in the market place. He/she will be driving a technology based cyber security approach for building trust in the minds of customers & employees

Key Responsibilities :

- Responsible for defining, managing and delivering a comprehensive portfolio of cyber security services and setting the strategic direction for company and Customers

- Build relationships with customers, translate their business problems into practical solutions, and drive the growth of the practice through service differentiation

- Be the face of company to customers and industry on Cyber Security

- Work with leadership to develop long term vision, technology road map, and annual goals for the Cyber Security Practice.

- Build a portfolio of advanced cyber security services. Develop IP, including methodologies, solutions, accelerators and tools to enable the practice to be recognized as a leader in the field of cyber security

- Build strategic and collaborative ecosystem partnerships with leading product and services firms in the industry.

- Demonstrate thought leadership in cyber security by being a part of a global committee of cyber security experts, speak at events, and consult as a subject matter expert on key projects and strategy/architecture issues.

- Network with peers & experts, be abreast of emerging trends to keep abreast latest security threats, information and prevention techniques

- Establishes risk management framework, enables identifies and measurement of risk and drives effective risk governance to enable effective business continuity

- Develop the team as outstanding, high-performing group of professionals

- Ensure organization adopts best in class standards and regulations (NIST, CIS, ISO, GDPR, CCPA)

Key skills :

- Expertise in several of the following areas: information security management, identity and access management, privacy and data protection, application security, cloud security, SOC, and threat & vulnerability management.

- Basic understanding of security-relevant industry standards, regulations and practices, such as ISO 27K, PCI, NIST, CIS, COBIT, GDPR, CCPR etc.

- Demonstrated knowledge of information security, computer forensics and data analysis; practices & procedures related to the investigation and response to network/computer intrusions and data theft.

- Experience in planning and implementing risk mitigation strategies relating to: data loss prevention, security incident and event management, identity and access management, role-based management, strong authentication, encryption, source code analysis, penetration testing, application and system hardening, firewall management and logical network segmentation

- Proven experience in liaising with customer needs, translating customer needs to security requirements and guiding implementation/adherence of controls

- Proven experience in managing the complete delivery lifecycle of security engagements, right from the pre-sales stage starting with the identification of opportunities and initial scoping through to the final delivery and signoff

- Must possess adequate knowledge of industry best cyber security practices and tools relevant to cloud setup & on-premise setup

- Relevant certifications. CISSP, CISA, CRISC, CEH are some of the preferred ones

Qualifications :

- A Bachelor's or Master's degree in engineering with over 15 years+ IT security and data governance work experience