AVP - Information Security

Equifax India; Mumbai; On-site; INR 6,000,000 - 9,000,000; Full time

Job summary

Equifax India is seeking an experienced cybersecurity executive to lead Information Security and serve as RBI-designated authority. Reporting to Regional CISO with board exposure, you will oversee regulatory filings and governance without direct reports or sales targets.

The ideal candidate has 15+ years in information security, a bachelor’s in a tech field, and recognised certifications such as CISSP or CISM.

Qualifications

• 15+ years in information security with increasing leadership responsibility.
• Experience in regulated industries and regulatory examinations.
• Bachelor’s degree in a relevant field; professional security certifications preferred.

Responsibilities

• Head of Information Security (RBI Designate) for India ECIS and single point of accountability for regulatory examinations.
• Meet RBI reporting obligations and manage incident notifications within required timelines.
• Coordinate with India security team and International CISO on control execution.
• Lead security incident responses, escalation, remediation, and regulator communications.
• Liaise with auditors, examiners, and assessors on security posture and evidence.

Skills

InfoSec leadership

Regulatory compliance

Incident response

Board reporting

Security audits

Education

Bachelor's degree in security/technical field

CISSP

CISM

Job description

Job Description:

Synopsis of the role:

Our team in India is seeking an experienced cybersecurity expert to lead the Information Security initiatives, serving as the official RBI-designated authority. Reporting directly to the Regional CISO with reporting access to the Board and Managing Director of India ECIS, you will manage compliance filings alongside regulatory reviews. Operating without direct reports or sales quotas, this position delivers targeted executive governance and regulatory exposure for a seasoned specialist.

What You’ll Do

• Serve as the RBI-designated Head of Information Security (CISO Designate) for India ECIS, acting as the single point of accountability in regulatory examinations and audits.
• Meet all regulatory reporting obligations under the RBI's information security framework, including incident notification within mandated timeframes.
• Coordinate with the matrixed India security team, reporting to the International CISO for Europe, India and the Emerging Markets, on control execution.
• Lead the entity's response to security incidents, ensuring timely escalation, remediation, and regulator communication.
• Liaise with internal and external auditors, examiners, and assessors on information security posture and evidence.

What Experience You Need

• Willing to work from our Mumbai office, at least 4 days a week.
• Bachelor's degree in a relevant technical or security field; a recognized security certification (e.g., CISSP, CISM) preferred.
• 15+ years of progressive information security experience, including prior experience in a security leadership or management role.
• Experience in a regulated industry or organisation, ideally as a designated or accountable security officer before a financial services regulator (RBI, SEBI, or equivalent).
• Tracking record of managing security incidents through to regulatory closure.
• Experience presenting to boards, audit committees, or senior leadership.
• Familiarity with India's data protection and financial-sector regulatory landscape (RBI circulars, CIC-specific rules).
• Experience working in an international or national matrixed team, influencing people not in your direct reporting line.

What Could Set You Apart

• Experience as a designated lead for a regulator, ideally as a InfoSec Lead for a Credit Information Company or NBFC.
• Experience using DAKSH or similar RBI incident-reporting portals.
• Exposure to global or regional security frameworks in a multinational matrix structure.
• Familiarity with Credit Reference Agencies or a comparable global credit bureau's security operating model.
• Board-level communication skills, including experience drafting board papers on security posture.
• Existing relationships with RBI examination teams or Indian financial regulators.
• Experience partnering closely with a InfoSec Leaders or global security function in a shared-services model.