ASVP - Cyber Security

Computer Age Management Services (CAMS); Chennai District; On-site; INR 4,500,000 - 6,000,000; Full time

Job summary

CAMSKRA, Chennai-based, seeks a senior Information Security leader to define and drive the organization’s cybersecurity strategy, building a robust ISMS and governance framework. You will align with SEBI CSCRF, CERT-In directives, DPDPA, and ISO standards, while partnering with regulators, auditors, and the board.

You will lead enterprise risk management, incident response, vulnerability programs, audits, and resilience exercises, shaping policy, training, and governance across the company.

Qualifications

• 7+ years of experience in Information Security, Cyber Security, Risk, Audit, or IT Governance with leadership in regulated environments.
• Strong knowledge of SEBI CSCRF, CERT-In directives, DPDPA, ISO 27001, ISO 9001.
• Expertise in cyber risk management, security operations, governance, compliance, and audit management.
• Professional certifications such as CISSP, CISM, CISA preferred.

Responsibilities

• Define and execute the overall Cyber Security and Information Security strategy aligned with business and regulatory requirements.
• Manage the organization's ISMS and Cyber Security Governance framework.
• Ensure compliance with SEBI CSCRF, CERT-In directives, DPDPA, ISO 27001, ISO 9001, and other applicable regulations.
• Act as the primary interface for cybersecurity matters with Regulators, Auditors, Management, Technology Committee, and the Board.
• Lead enterprise-wide cyber risk management, threat assessments, risk register maintenance, and risk remediation initiatives.
• Oversee SOC monitoring, incident response, threat intelligence, and cyber threat management activities.
• Ensure timely reporting of cybersecurity incidents, regulatory submissions, and compliance disclosures.
• Drive vulnerability management, VAPT, Red Teaming, Breach & Attack Simulations, and control effectiveness assessments.
• Lead Cyber Audits, System Audits, ISO Audits, Vendor Security Assessments, and closure of audit observations.
• Establish and continuously improve cyber resilience, business continuity, and disaster recovery frameworks.
• Plan and conduct cyber drills, recovery simulations, disaster recovery exercises, and resilience assessments.
• Govern IAM, privileged access reviews, and security control effectiveness monitoring.
• Manage third-party and vendor cyber risk assessments and security compliance across outsourced services.
• Develop, review, and update cybersecurity policies, standards, procedures, and governance documents.
• Drive data protection and privacy requirements, including DPDPA compliance initiatives.
• Build security awareness and training programs across the organization.
• Provide strategic direction on emerging threats, regulatory changes and security investments.
• Establish cybersecurity KPIs, KRIs, dashboards, and management reporting mechanisms.
• Lead cybersecurity budgeting, resource planning, and security transformation initiatives.
• Ensure continuous improvement of CAMSKRA's cyber security maturity, resilience, and governance posture.

Skills

Information Security

Cyber Security Leadership

Regulatory Compliance

Governance

Stakeholder Management

Job description

Role Requirement:
Lead CAMSKRA's Information Security, Cyber Security, Cyber Resilience, Risk Management, Regulatory Compliance, Privacy, and Governance functions to ensure a secure, resilient, and regulator-compliant operating environment.

Key Responsibilities

• Define and execute the overall Cyber Security and Information Security strategy aligned with business and regulatory requirements.
• Manage the organization's Information Security Management System (ISMS) and Cyber Security Governance framework.
• Ensure compliance with SEBI Cyber Security & Cyber Resilience Framework (CSCRF), CERT-In directives, DPDPA, ISO 27001, ISO 9001, and other applicable regulations.
• Act as the primary interface for cybersecurity matters with Regulators, Auditors, Management, Technology Committee, and the Board.
• Lead enterprise-wide cyber risk management, threat assessments, risk register maintenance, and risk remediation initiatives.
• Oversee Security Operations Center (SOC) monitoring, incident response, threat intelligence, and cyber threat management activities.
• Ensure timely reporting of cybersecurity incidents, regulatory submissions, and compliance disclosures.
• Drive vulnerability management, VAPT, Red Teaming, Breach & Attack Simulations, and control effectiveness assessments.
• Lead Cyber Audits, System Audits, ISO Audits, Vendor Security Assessments, and ensure closure of all audit observations.
• Establish and continuously improve cyber resilience, business continuity, and disaster recovery frameworks.
• Plan and conduct cyber drills, recovery simulations, disaster recovery exercises, and resilience assessments.
• Govern identity and access management, privileged access reviews, and security control effectiveness monitoring.
• Manage third-party and vendor cyber risk assessments and ensure security compliance across outsourced services.
• Develop, review, and update cybersecurity policies, standards, procedures, and governance documents.
• Drive implementation of data protection and privacy requirements, including DPDPA compliance initiatives.
• Build a strong security culture through periodic security awareness and training programs across the organization.
• Provide strategic direction on emerging cyber threats, technology risks, regulatory changes and security investments.
• Establish cybersecurity KPIs, KRIs, dashboards, and management reporting mechanisms.
• Lead cybersecurity budgeting, resource planning, and security transformation initiatives.
• Ensure continuous improvement of CAMSKRA's cyber security maturity, resilience, and governance posture.

Skills & Experience Required

• 7+ years of experience in Information Security, Cyber Security, Risk, Audit, or IT Governance, with leadership experience in regulated environments.
• Strong knowledge of SEBI regulations, CSCRF, CERT-In, DPDPA, ISO 27001, ISO 9001, VAPT, Cyber Audits, and Cyber Resilience frameworks.
• Expertise in cyber risk management, security operations, incident response, governance, compliance, and audit management.
• Excellent stakeholder management, regulatory engagement, board reporting, and leadership skills.
• Professional certifications such as CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer preferred.