AVP Information Security

Jain International Trade Organisation - India; Mumbai; On-site; INR 3,000,000 - 4,500,000; Full time

Job summary

Virtuous Advisors & Resources Pvt. Ltd. in Mumbai is seeking an experienced Information Security leader to head GRC, cyber security, and AI security initiatives across the organization.

The role functions as a senior security executive, partnering with business and technology teams to drive enterprise-wide security programs. The candidate should bring 10+ years of relevant experience, strong leadership, and a track record in ISO 27001, NIST, PCI DSS, and CIS Controls, with hands-on expertise in

Qualifications

• Experience leading Governance, Risk & Compliance (GRC) and cyber security programs across an enterprise.
• Hands-on in risk management, incident response, and security architecture.
• Strong exposure to regulatory compliance and third-party risk management.

Responsibilities

• Define and implement enterprise-wide Information Security strategy.
• Develop Information Security policies, standards, frameworks and procedures.
• Build governance processes across technology, engineering and business functions.
• Drive cyber maturity improvement initiatives.
• Establish security metrics and executive reporting dashboards.
• Present security posture updates to senior leadership and governance committees.

Skills

AI governance

Cybersecurity

Information Security

Emerging Technology

Cyber Laws

Technology Laws

Cyber GRC

ISO 42001 Lead Implementer

ISO 27001

Job description

Virtuous Advisors & Resources Pvt. Ltd. Mumbai Posted 1 day ago Updated 1 day ago

Job Type: FullTimePermanent

Work Mode: Onsite

Experience: SrManagement

Travel Requirements:

Skills:

Ai governance, Cybersecurity, Information Security, Emerging Technology, Cyber Laws, Technology Laws, Cyber GRC, ISO 42001 AIMS Lead Implementer, ISO 27001

We are looking for an experienced Information Security professional to lead Governance, Risk & Compliance (GRC), Cyber Security, AI Security, Business Continuity Planning (BCP), Security Governance, and Regulatory Compliance across the organization. The role requires a strong leader who can function as a "Mini CISO" by independently managing enterprise security initiatives, cyber risk, audit readiness, security architecture, and compliance while working closely with business and technology teams. The candidate should have hands-on experience in Information Security, Security Operations (SOC), Security Architecture, Risk Management, Incident Response, Vulnerability Management, Security Assessments, Cloud Security, DevSecOps, AI Security, and enterprise security frameworks such as ISO 27001, NIST, PCI DSS, and CIS Controls. Experience in secure SDLC, AI Security by Design, AI governance, AI-enabled Red Teaming, penetration testing, vulnerability assessments, security automation, and cloud-native security is highly preferred. Candidates should have strong exposure to regulatory compliance, third-party risk management, business continuity, disaster recovery, cyber resilience, and security strategy. Preference will be given to candidates from SEBI-regulated organizations such as Asset Management Companies, Stock Exchanges, Depositories, Broking Firms, Wealth Management companies, and other technology-driven financial platforms. Candidates from organizations using large-scale software development, DevSecOps, AI, and digital platforms such as Zerodha, Groww, Upstox, NSE, BSE, CDSL, NSDL, CAMS, and KFin will be highly preferred. CISSP is preferred, while CISM, CISA, CRISC, CEH, ISO 27001, AWS/Azure Security, and similar certifications will be an added advantage. The ideal candidate should have 10+ years of relevant experience with strong leadership, stakeholder management, and the ability to drive enterprise-wide cybersecurity and governance initiatives.

Responsibilities

• Define and implement enterprise-wide Information Security strategy.
• Develop Information Security policies, standards, frameworks and procedures.
• Build governance processes across technology, engineering and business functions.
• Drive cyber maturity improvement initiatives.
• Establish security metrics and executive reporting dashboards.
• Present security posture updates to senior leadership and governance committees.
• Build long-term cyber resilience strategy.