AVP - Information Security

Equifax; Mumbai City; On-site; INR 7,000,000 - 10,000,000; Full time

Benefits offered by this job

Hybrid work setting

Competitive compensation

Healthcare package

Learning & career platform

Job summary

Equifax is seeking an experienced cybersecurity leader to head Information Security for India ECIS, reporting to the Regional CISO and Board. You will manage RBI regulatory obligations, coordinate with the matrixed security team, and lead incident response with regulator communications.

The role requires 15+ years in information security, leadership experience, and familiarity with RBI/CIC rules. Mumbai-based, hybrid work with strategic governance responsibilities.

Qualifications

• Willing to work from Mumbai office at least 4 days a week.
• Bachelor’s degree in security/technical field; security certs preferred (CISSP/CISM).
• 15+ years in information security with leadership experience.
• Regulated industry experience, RBI/SEBI familiarity preferred.
• Track record of handling security incidents through regulatory closure.
• Experience presenting to boards or senior leadership.

Responsibilities

• Serve as RBI-designated Head of Information Security for India ECIS, sole regulatory accountability point.
• Meet regulatory reporting obligations under RBI information security framework.
• Coordinate with India security team and report to International CISO for Europe/India/EMs.
• Lead incident response and regulator communications with timely escalation and remediation.
• Liaise with auditors and assessors on information security posture and evidence.

Skills

InfoSec leadership

Regulatory reporting

Incident management

Board communication

Security governance

Education

Bachelor’s degree in security/tech

CISSP

CISM

Tools

DAKSH RBI portal

Job description

Equifax is where you can power your possible. If you want to achieve your true potential, chart new paths, develop new skills, collaborate with bright minds, and make a meaningful impact, we want to hear from you.

Synopsis of the role:

Our team in India is seeking an experienced cybersecurity expert to lead the Information Security initiatives, serving as the official RBI-designated authority. Reporting directly to the Regional CISO with reporting access to the Board and Managing Director of India ECIS, you will manage compliance filings alongside regulatory reviews. Operating without direct reports or sales quotas, this position delivers targeted executive governance and regulatory exposure for a seasoned specialist.

What you’ll do

• Serve as the RBI-designated Head of Information Security (CISO Designate) for India ECIS, acting as the single point of accountability in regulatory examinations and audits.
• Meet all regulatory reporting obligations under the RBI’s information security framework, including incident notification within mandated timeframes.
• Coordinate with the matrixed India security team, reporting to the International CISO for Europe, India and the Emerging Markets, on control execution.
• Lead the entity’s response to security incidents, ensuring timely escalation, remediation, and regulator communication.
• Liaise with internal and external auditors, examiners, and assessors on information security posture and evidence.

What experience you need

• Willing to work from our Mumbai office, at least 4 days a week.
• Bachelor’s degree in a relevant technical or security field; a recognized security certification (e.g., CISSP, CISM) preferred.
• 15+ years of progressive information security experience, including prior experience in a security leadership or management role.
• Experience in a regulated industry or organisation, ideally as a designated or accountable security officer before a financial services regulator (RBI, SEBI, or equivalent).
• Tracking record of managing security incidents through to regulatory closure.
• Experience presenting to boards, audit committees, or senior leadership.
• Familiarity with India’s data protection and financial-sector regulatory landscape (RBI circulars, CIC-specific rules).
• Experience working in an international or national matrixed team, influencing people not in your direct reporting line.

What could set you apart

• Experience as a designated lead for a regulator, ideally as a InfoSec Lead for a Credit Information Company or NBFC.
• Experience using DAKSH or similar RBI incident-reporting portals.
• Exposure to global or regional security frameworks in a multinational matrix structure.
• Familiarity with Credit Reference Agencies or a comparable global credit bureau’s security operating model.
• Board-level communication skills, including experience drafting board papers on security posture.
• Existing relationships with RBI examination teams or Indian financial regulators.
• Experience partnering closely with a InfoSec Leaders or global security function in a shared-services model.

#India

We offer a hybrid work setting, comprehensive compensation and healthcare packages, attractive paid time off, and organizational growth potential through our online learning platform with guided career tracks.

Primary Location:

IND-Mumbai-Equifax Credit Information Services

Function:

Function - Security Governance and Compliance

Schedule:

Full time