Role & responsibilities :

- Leading the development and implementation of the Company's information security strategy.

- Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.

- Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.

- Identifying and mitigating security risks, ensuring the organization remains resilient against emerging threats.

- Ensuring the Company's compliance with industry standards and regulations.

- Managing security audits, compliance assessments, incident response processes, and investigating security breaches.

- Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.

- Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations.

- Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.

- Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.

- Manage the security architecture, tools, and technologies deployed across the organization's IT infrastructure.

- Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws, such as IRDA Cyber Laws, RBI, CERT-IN, Meity, DDPA.

- Monitor security metrics and report on the organization's security posture to executive leadership.

- Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization.

- Stay updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.

Preferred candidate profile :

- Bachelors degree in Information Security, Computer Science, or a related field.

- 6+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.

- Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001, DDPA), and risk management practices.

- Working knowledge of security auditing, vulnerability assessments, and risk mitigation.

- Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, DLP, and encryption protocols.

- Solid knowledge of data privacy regulations and compliance requirements.

- Ability to develop and implement complex security strategies.

- Strong leadership and communication skills, with the ability to influence decision-making at the executive level.

- Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.

- Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.

- Experience with cloud security and securing cloud infrastructure & SAAS platforms.

- Familiarity with incident management and disaster recovery planning.

- Knowledge of ethical hacking and penetration testing techniques.

- Background in regulatory compliance and data privacy laws in the industry.

- Hands-on experience with SIEM tools, firewalls, DLP and intrusion detection systems.

- Expertise in secure software development and Dev Sec Ops practices.

- Understanding of artificial intelligence and machine learning applications in security.