CIO Portfolio The CIO Portfolio brings together to improve the provision of service, assurance and governance across Technology, Data, Change, Information Security, plus programmes and projects including the Core Systems Replacement Programme, which is one of the strategic priorities - It is a highly skilled, joined-up team, focused on bringing their resources together to serve About the role: - The CITSO is an Executive role within the CIO Portfolio which services the entire organisation. The role holder will provide a clear vision and direction for information and Cyber Security operations. They will promote continuous improvement, innovation and agility in service delivery, whilst working in consultation and collaboration with colleagues across Org. As the CITSO, you will be responsible for overseeing a range of technical and process security controls and leading a programme of continuous improvement in response to changing security threats and risk. - The role requires a thorough understanding of the technology underpinning Org , as well as a broad, up-to-date knowledge of information security frameworks, pertinent regulation and legislation, incident management and response, secure development techniques and approaches, Cyber Security engineering and operations, and management and governance of Cyber risk and Cyber Security. - Having performed a similar role in a large, distributed organisation, you will have a strong information and Cyber Security background along with formal qualifications. You will have established and led a large, progressive information security function, developing innovative, future focused information and Cyber Security capability in support of business objectives. - You will be a strategic and lateral thinker with exceptional leadership credentials and a sophisticated approach to stakeholder and supplier management. - This is a fantastic opportunity to join a world class institution in a pivotal and highly visible leadership role which will require high levels of personal energy and commitment. Key responsibilities: - Information and Cyber Security Strategic Direction - Define, develop and maintain a business-aligned Information and Cyber Security strategy and operating model - Drive and deliver change to Org's Information and Cyber Security systems, processes and procedures by continuously analysing and reviewing new security technologies and practices as informed by industry best practice - Report to committees and management groups on Information and Cyber Security matters - Represent Org on national and international external consortium groups and boards and engage effectively in appropriate external networks, ensuring org can anticipate, meet and respond to new Information and Cyber Security challenges and threats Leadership and People Management: - Develop and lead an effective, high-performance Information Security team retaining and attracting key talent to ensure continuous improvement in staff competencies, skills and knowledge - Establish and maintain clear and measurable Information and Cyber Security strategic plans, budgets and targets, and robust and fit-for-purpose operational procedures and deliver measurable service improvements and ensure that all elements of the service represent the best value for money - Play an effective role as a member of the CIO Portfolio Executive in the leadership of the Unit. - Foster a culture of innovation and continuous improvement that encourages, engages and supports a high level of professional development and personal responsibility - Ensure that the Unit's resources and budget are managed effectively, in accordance with institutional policy and procedures, and provide best value for money. - Provide the Information Security team with high-quality and empowering leadership, setting and delivering the highest service standards and a strong performance culture by developing and sustaining best practice within the Unit Information and Cyber Security Management: - Provide senior leadership and oversight of effective information and Cyber Security risk management, integrated with institutional risk management framework - Ensure that information and Cyber Security risks.presented through suppliers and delivery partners are identified and managed appropriately - Develop and maintain an effective Information Security Management System and processes for continual improvement - Ensure Information Security is managed effectively throughout the IT service delivery lifecycle (incl. Security Operations, Security Architecture and Security Assurance) - Lead on development and delivery of measures and metrics to support the assessment, reporting and ongoing improvement of the information security posture - Work closely with internal stakeholders and business units to keep abreast of planned changes to technologies, working practices, and business activities that could have an impact . Information Security or risk profile - Ensure and promote an appropriate level of information security culture and awareness - Direct, and assist as necessary, investigations into information security breaches and pursue associated disciplinary and legal matters, liaising with the Information Rights team on data protection legislation ensuring root-causes of such breaches are understood and addressed Person specification: EXPERIENCE: - Substantial experience in senior management in a complex IT organisation encompassing service delivery, application development and IT infrastructure - A track record in the management and delivery of transformational security improvements across an organisation - Proven experience at engaging, influencing and managing stakeholders across departmental and organisational boundaries up to and including CEO / KOM level - A track record in directing and managing innovative change and continuous improvement, ensuring excellent organisational performance and outcomes across a complex portfolio of responsibilities - Proven experience at managing complex budgets and resources with a track record of identifying and securing approval for business cases at enterprise level for organisational investment in information and cyber security - Experienced in leading, developing and motivating a team of subject matter experts KNOWLEDGE: - An excellent understanding of best practice within Information Security and risk management including standards such as ISO/IEC 27001, Cyber Essentials. - An understanding of current and emerging threats and countermeasures and the organisational challenges to addressing these threats - An understanding of Application Security threats and countermeasures - A good practical knowledge of security technologies and wider business solutions including Firewalls, IDS/IPS, Identity and access management, SIEM, remote working and cloud technologies SKILLS: - A collaborative leader with strategic acumen and problem-solving skills, able to inspire and motivate colleagues - An ability to articulate strategy in an empowering, collegiate and inspiring way which also informs transparent, viable and sustainable planning processes - The ability to work within a regulatory framework and to articulate its potential as a tool for continuous improvement - Demonstrable creativity and a commitment to future-proofing service and delivery in a fast paced, ever-changing environment - A Self Starter with the ability to lead and drive change through an organisation - Excellent communication skills, both written and verbal. Ability to present complex or highly technical issues in simple and easy-to-understand formats - Ability to build strong relationships and influence decisions with internal and external stakeholders - A good understanding of project management methodology and how to implement security within them - Good analytical skills and the ability to challenge the norm - An ability to think and plan strategically and systematically while recognising the need to deliver to the business requirements - The ability to be pragmatic while balancing the needs and security Qualifications - An appropriate degree, equivalent qualification or experience AREAS WHICH FORM THE CIO PORTFOLIO - Learning Experience and Technology - Strategic Technology Programmes - Information Technology - Change and Improvement - Information Security

Mumbai

DVP - Chief IT Security Officer 

Job Description for DVP - Chief IT Security Officer  in Connexions Company in  Mumbai for (10-15) years of experience. Apply Now!