AVP - Information Security

Equifax India; Maharashtra; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Equifax India seeks an experienced cybersecurity leader to become the RBI-designated Head of Information Security. You will report to the Regional CISO and board-level executives, owning regulatory governance and incident response across India ECIS.

You will drive compliance filings, coordinate with the international security function, and ensure timely regulator communications while guiding a matrixed team in a regulated financial services context.

Qualifications

• Bachelor's degree in a technical or security field.
• CISSP/CISM or equivalent certification preferred.
• 15+ years of progressive information security experience, including leadership.
• Experience in regulated financial services environments with regulator interactions.
• Proven incident management through regulatory processes and board exposure.
• Experience presenting to boards or audit committees; familiarity with RBI rules.

Responsibilities

• Lead RBI-designated Head of Information Security for India ECIS.
• Ensure regulatory reporting obligations are met within required timeframes.
• Coordinate with the International CISO and matrixed teams on controls.
• Oversee security incident response, escalation, remediation, and regulator communications.
• Liaise with auditors and regulators on information security posture and evidence.

Skills

Regulatory compliance

CISO leadership

Stakeholder management

Information security

Regulatory reporting

Education

Bachelor's degree in security or related field

CISSP / CISM certification

Job description

Synopsis of the role:

Our team in India is seeking an experienced cybersecurity expert to lead the Information Security initiatives, serving as the official RBI-designated authority. Reporting directly to the Regional CISO with reporting access to the Board and Managing Director of India ECIS, you will manage compliance filings alongside regulatory reviews. Operating without direct reports or sales quotas, this position delivers targeted executive governance and regulatory exposure for a seasoned specialist.

What You’ll Do

• Serve as the RBI-designated Head of Information Security (CISO Designate) for India ECIS, acting as the single point of accountability in regulatory examinations and audits.
• Meet all regulatory reporting obligations under the RBI's information security framework, including incident notification within mandated timeframes.
• Coordinate with the matrixed India security team, reporting to the International CISO for Europe, India and the Emerging Markets, on control execution.
• Lead the entity's response to security incidents, ensuring timely escalation, remediation, and regulator communication.
• Liaise with internal and external auditors, examiners, and assessors on information security posture and evidence.

What Experience You Need

• Willing to work from our Mumbai office, at least 4 days a week.
• Bachelor's degree in a relevant technical or security field; a recognized security certification (e.g., CISSP, CISM) preferred.
• 15+ years of progressive information security experience, including prior experience in a security leadership or management role.
• Experience in a regulated industry or organisation, ideally as a designated or accountable security officer before a financial services regulator (RBI, SEBI, or equivalent).
• Tracking record of managing security incidents through to regulatory closure.
• Experience presenting to boards, audit committees, or senior leadership.
• Familiarity with India's data protection and financial-sector regulatory landscape (RBI circulars, CIC-specific rules).
• Experience working in an international or national matrixed team, influencing people not in your direct reporting line.

What Could Set You Apart

• Experience as a designated lead for a regulator, ideally as a InfoSec Lead for a Credit Information Company or NBFC.
• Experience using DAKSH or similar RBI incident-reporting portals.
• Exposure to global or regional security frameworks in a multinational matrix structure.
• Familiarity with Credit Reference Agencies or a comparable global credit bureau's security operating model.
• Board-level communication skills, including experience drafting board papers on security posture.
• Existing relationships with RBI examination teams or Indian financial regulators.
• Experience partnering closely with a InfoSec Leaders or global security function in a shared-services model.

#India