About us :

Areion group consists of boutique investment banking companies like NBFC, Assets Management, Advisory, and Investment Banking, specializing in the resolution of distressed assets. We focus on providing solutions in high-growth and niche segments, prioritizing the well-being and growth of our team members. At Areion, we offer various learning and development opportunities within the group, fostering a dynamic and rewarding work environment.

Role Summary :

We are seeking an experienced and strategic Group Chief Information Security Officer (Group CISO) to lead the Information Security and Cybersecurity functions across all entities within the Areion group. The Group CISO will be a key member of the executive team, responsible for driving the enterprise cybersecurity strategy, ensuring robust data protection, managing technology risk, and maintaining compliance with regulatory frameworks across our financial services ecosystem.

Key Responsibilities :

- Lead and manage the Group Information Security strategy across the NBFC, Asset Management, Advisory, and Investment Banking entities.

- Establish, implement, and maintain best-in-class information security policies, governance frameworks, and security architectures.

- Ensure compliance with statutory and regulatory requirements, including RBI cybersecurity guidelines, SEBI regulations, and data privacy laws.

- Perform cyber risk assessments, manage third-party vendor risks, and implement robust operational risk mitigations.

- Oversee Security Operations Center (SOC) activities, threat intelligence, vulnerability management, and incident response mechanisms.

- Advise senior leadership and the Board on cybersecurity posture, emerging threats, and capital investments in security technology.

- Maintain relationships with external cybersecurity auditors, technology partners, CERT-In, and regulatory bodies.

- Champion a security-first culture by conducting group-wide cybersecurity awareness and training programs.

Qualifications :

- Bachelor's or Masters degree in Computer Science, Information Technology, Cyber Security, or a related field.

- Relevant professional certifications such as CISM, CISSP, CRISC, or CISA are highly preferred.

Experience :

- Minimum 12+ years of relevant experience in IT Security and Cybersecurity, with at least 5 years in a leadership role.

- Experience working within Banks, NBFCs, Asset Management Companies (AMCs), or other regulated financial institutions.

- Proven track record of handling cyber risk, regulatory audits, and enterprise security governance in financial services.