AVP - Information Security

Equifax; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Equifax, Inc. in Mumbai seeks an experienced cybersecurity executive to lead Information Security as RBI-designated authority. Reporting to Regional CISO with access to Board and Managing Director, you will oversee regulatory filings and governance.

This role requires 15+ years in information security, RBI/regulatory exposure, and strong board-level communication. You will coordinate with global security teams, manage incident response, and liaise with auditors and regulators to ensure

Qualifications

• Bachelor's degree in a technical or security field and relevant certifications preferred.
• 15+ years in information security with leadership experience.
• Experience in regulated financial services or RBI or equivalent.
• Proven incident management from detection to regulatory closure.
• Experience presenting to boards or senior leadership.
• Knowledge of Indian data protection and financial regulations.

Responsibilities

• Act as RBI-designated Head of Information Security for India ECIS and lead regulatory audits.
• Meet RBI reporting obligations and notify incidents within mandated timeframes.
• Coordinate with India security team and report to International CISO for Europe, India and Emerging Markets.
• Lead incident response, escalation, remediation, regulator communications.
• Liaise with auditors, examiners, and assessors on security posture and evidence.

Skills

InfoSec leadership

Regulatory compliance

Incident response management

Board communication

Cross-functional collaboration

Regulatory reporting

Education

Bachelor's degree

Security certification (CISSP/CISM)

Tools

RBI incident reporting portals

Job description

Synopsis of the role:

Our team in India is seeking an experienced cybersecurity expert to lead the Information Security initiatives, serving as the official RBI-designated authority. Reporting directly to the Regional CISO with reporting access to the Board and Managing Director of India ECIS, you will manage compliance filings alongside regulatory reviews. Operating without direct reports or sales quotas, this position delivers targeted executive governance and regulatory exposure for a seasoned specialist.

What you’ll do

• Serve as the RBI-designated Head of Information Security (CISO Designate) for India ECIS, acting as the single point of accountability in regulatory examinations and audits.
• Meet all regulatory reporting obligations under the RBI's information security framework, including incident notification within mandated timeframes.
• Coordinate with the matrixed India security team, reporting to the International CISO for Europe, India and the Emerging Markets, on control execution.
• Lead the entity's response to security incidents, ensuring timely escalation, remediation, and regulator communication.
• Liaise with internal and external auditors, examiners, and assessors on information security posture and evidence.

What experience you need

• Willing to work from our Mumbai office, at least 4 days a week.
• Bachelor's degree in a relevant technical or security field; a recognized security certification (e.g., CISSP, CISM) preferred.
• 15+ years of progressive information security experience, including prior experience in a security leadership or management role.
• Experience in a regulated industry or organisation, ideally as a designated or accountable security officer before a financial services regulator (RBI, SEBI, or equivalent).
• Tracking record of managing security incidents through to regulatory closure.
• Experience presenting to boards, audit committees, or senior leadership.
• Familiarity with India's data protection and financial‑sector regulatory landscape (RBI circulars, CIC‑specific rules).
• Experience working in an international or national matrixed team, influencing people not in your direct reporting line.

What could set you apart

• Experience as a designated lead for a regulator, ideally as a InfoSec Lead for a Credit Information Company or NBFC.
• Experience using DAKSH or similar RBI incident‑reporting portals.
• Exposure to global or regional security frameworks in a multinational matrix structure.
• Familiarity with Credit Reference Agencies or a comparable global credit bureau's security operating model.
• Board‑level communication skills, including experience drafting board papers on security posture.
• Existing relationships with RBI examination teams or Indian financial regulators.
• Experience partnering closely with a InfoSec Leaders or global security function in a shared‑services model.

#India