AVP Information Security

JITO; Mumbai; On-site; INR 4,500,000 - 7,000,000; Full time

Job summary

Virtuous Advisors & Resources Pvt. Ltd. in Mumbai seeks a Senior Information Security leader to head Governance, Risk & Compliance, Cyber Security, AI Security and Business Continuity across the organization.

The role requires an expert who can operate as a Mini CISO, driving enterprise security initiatives, cyber risk management, audit readiness, security architecture, and regulatory compliance. The candidate should have hands-on experience in security operations, risk management, incident

Qualifications

• 10+ years of relevant experience in information security and governance.
• Hands-on experience in security operations, risk management and incident response.
• Experience leading enterprise security initiatives as a Mini CISO.
• Familiarity with ISO 27001, NIST, PCI DSS and CIS Controls.
• Preference for candidates from SEBI-regulated financial platforms.

Responsibilities

• Define and implement enterprise-wide Information Security strategy.
• Develop information security policies, standards and procedures.
• Build governance across technology, engineering and business functions.
• Drive cyber maturity improvement initiatives and security metrics.
• Present security posture to senior leadership and governance committees.
• Build long-term cyber resilience strategy.

Skills

Information Security

GRC

Cyber Security

AI Security

Security Architecture

Risk Management

Incident Response

Vulnerability Management

SOC

DevSecOps

Education

CISSP

ISO 27001

Job description

Virtuous Advisors & Resources Pvt. Ltd. Mumbai Posted 1 day ago Updated 1 day ago

Job Type: FullTimePermanent

Work Mode: Onsite

Experience: SrManagement

Travel Requirements:

Skills:

Ai governance, Cybersecurity, Information Security, Emerging Technology, Cyber Laws, Technology Laws, Cyber GRC, ISO 42001 AIMS Lead Implementer, ISO 27001

We are looking for an experienced Information Security professional to lead Governance, Risk & Compliance (GRC), Cyber Security, AI Security, Business Continuity Planning (BCP), Security Governance, and Regulatory Compliance across the organization. The role requires a strong leader who can function as a "Mini CISO" by independently managing enterprise security initiatives, cyber risk, audit readiness, security architecture, and compliance while working closely with business and technology teams. The candidate should have hands-on experience in Information Security, Security Operations (SOC), Security Architecture, Risk Management, Incident Response, Vulnerability Management, Security Assessments, Cloud Security, DevSecOps, AI Security, and enterprise security frameworks such as ISO 27001, NIST, PCI DSS, and CIS Controls. Experience in secure SDLC, AI Security by Design, AI governance, AI-enabled Red Teaming, penetration testing, vulnerability assessments, security automation, and cloud-native security is highly preferred. Candidates should have strong exposure to regulatory compliance, third-party risk management, business continuity, disaster recovery, cyber resilience, and security strategy. Preference will be given to candidates from SEBI-regulated organizations such as Asset Management Companies, Stock Exchanges, Depositories, Broking Firms, Wealth Management companies, and other technology-driven financial platforms. Candidates from organizations using large-scale software development, DevSecOps, AI, and digital platforms such as Zerodha, Groww, Upstox, NSE, BSE, CDSL, NSDL, CAMS, and KFin will be highly preferred. CISSP is preferred, while CISM, CISA, CRISC, CEH, ISO 27001, AWS/Azure Security, and similar certifications will be an added advantage. The ideal candidate should have 10+ years of relevant experience with strong leadership, stakeholder management, and the ability to drive enterprise-wide cybersecurity and governance initiatives.

Responsibilities

• Define and implement enterprise-wide Information Security strategy.
• Develop Information Security policies, standards, frameworks and procedures.
• Build governance processes across technology, engineering and business functions.
• Drive cyber maturity improvement initiatives.
• Establish security metrics and executive reporting dashboards.
• Present security posture updates to senior leadership and governance committees.
• Build long-term cyber resilience strategy.