About the Opportunity :

Our client is a fast-growing, technology-led financial services organisation with a strong digital presence and a wide portfolio of investment and financial products.

As the organisation continues to scale, it is looking to appoint a Chief Information Security Officer (CISO) to lead its information and cyber-security agenda across technology, applications, cloud infrastructure and business platforms.

This is a high-impact leadership role combining Board-level security governance, regulatory compliance, cyber-risk management and technical security leadership.

Key Responsibilities :

- Own and continuously strengthen the organisation's overall information and cyber-security strategy, policies and framework.

- Provide regular cyber-security reporting to the Board, IT/Risk/Audit Committees and senior leadership.

- Lead security governance and ensure compliance with applicable SEBI, CERT-In, AMFI, DPDP Act and other regulatory requirements.

- Drive the organisation's cyber-security posture across cloud, network, applications, APIs and enterprise platforms.

- Lead SOC, incident response, cyber forensics, RCA and remediation, including regulatory reporting within prescribed timelines.

- Own and oversee VAPT, cyber audits, red-teaming, threat hunting, cyber drills and security assessments.

- Drive implementation of Zero Trust, IAM/PAM, SIEM/SOAR, EDR/XDR, DevSecOps/Secure SDLC and security architecture.

- Strengthen protection of sensitive customer, KYC, financial and personal data.

- Own third-party/vendor cyber-risk management, including security assessment of critical technology and business partners.

- Drive BCP/DR, cyber resilience and security awareness across the organisation.

- Act as the key cyber-security interface with SEBI, exchanges, CERT-In, AMFI and other relevant regulatory bodies.

Ideal Candidate :

- 10 - 15+ years of experience in information/cyber security, with at least 5 years in a senior security leadership role.

- Strong preference for candidates from BFSI, broking, AMC, depository, wealth management, fintech or other highly regulated financial-services environments.

- Prior experience as a CISO / Deputy CISO / Head of Information Security / Head of Cyber Security would be preferred.

- Strong understanding of SEBI CSCRF, SEBI regulations applicable to financial markets, AMFI, CERT-In directions and DPDP Act 2023.

- Strong technical understanding of cloud security, SIEM/SOAR, EDR/XDR, IAM/PAM, DevSecOps, secure API/microservices architecture and cryptography/key management.

- Experience managing security teams, external security partners, audits and incident-response functions.

- Excellent Board-level communication, stakeholder management and crisis-management capabilities.

- Relevant certifications such as CISSP, CISM, CISA, ISO 27001 LA or CEH preferred. Cloud/security certifications such as CCSP, OSCP, GCIH/GCFA would be an advantage.

- Engineering/technology degree or equivalent qualification preferred.