Chief Information Security Officer

Biz Hr It Solutions; Hyderabad; On-site; INR 6,000,000 - 12,000,000; Full time

Job summary

Aarvee Engineering Consultants Limited is seeking a Chief Information Security Officer to lead the organization’s information security program from its Hyderabad corporate office. You will establish and monitor the ISMS, govern cybersecurity strategy, oversee SOC operations, and safeguard BIM/GIS assets and cloud platforms against cyber threats.

You will drive ISO/IEC 27001, Indian IT Act, DPDP, and CERT-In compliance, coordinate audits, manage incident response, disaster recovery, and vendor

Qualifications

• Bachelor’s degree in Computer Science / IT / Cybersecurity / Electronics or related discipline; Master’s degree preferred.
• 12–15 years of experience in Information Security / Cybersecurity / IT Governance with minimum 5 years in leadership role.
• Experience in ISO/IEC 27001 implementation, SOC/SIEM environments, and multi-location organizations.

Responsibilities

• Develop and implement enterprise-wide cybersecurity strategy, ISMS framework, and information security policies.
• Conduct cybersecurity risk assessments and maintain Information Security Risk Registers.
• Oversee SOC operations, SIEM monitoring, threat intelligence, incident escalation, vulnerability management, and ransomware preparedness.
• Ensure continuous monitoring of networks, servers, endpoints, cloud platforms, VPNs, remote project offices, and business applications.
• Lead cybersecurity incident response, digital forensics, disaster recovery, and business continuity activities.
• Ensure compliance with ISO/IEC 27001, Indian IT Act, DPDP requirements, client cybersecurity obligations, and CERT-In requirements.
• Coordinate VAPT activities, cybersecurity audits, and closure of audit findings.
• Ensure protection, backup, retention, secure transfer, and disposal of organizational information assets.
• Evaluate cybersecurity posture of vendors, consultants, cloud providers, and third‑party service providers.

Skills

ISMS & SOC management

SIEM monitoring

Incident response

Cybersecurity risk management

Cloud/network security

Leadership

Education

Bachelor's degree in Computer Science / IT / Cybersecurity / Electronics

Master’s degree preferred

Job description

Position : Chief Information Security Officer (CISO)

Department : Information Technology

Reporting To : Managing Director

Location : Corporate Office Hyderabad

Employment Type: Full Time

Grade : Senior Leadership

Position Purpose

Responsible for establishing, implementing, monitoring, and continually improving the organization’s Information Security Management System (ISMS), cybersecurity governance framework, and Security Operations Center (SOC) oversight across Aarvee Engineering Consultants Limited. The role ensures protection of engineering project data, BIM/CAD, GIS & LiDAR systems, client information, cloud platforms, and business systems against cyber threats, ransomware, unauthorized access, and data leakage while ensuring compliance with ISO/IEC 27001, client cybersecurity requirements, DPDP requirements, and CERT-In advisories.

Key Responsibilities

• Develop and implement enterprise-wide cybersecurity strategy, ISMS framework, and information security policies.
• Conduct cybersecurity risk assessments and maintain Information Security Risk Registers.
• Oversee SOC operations, SIEM monitoring, threat intelligence, incident escalation, vulnerability management, and ransomware preparedness.
• Ensure continuous monitoring of networks, servers, endpoints, cloud platforms, VPNs, remote project offices, and business applications.
• Lead cybersecurity incident response, digital forensics, disaster recovery, and business continuity activities.
• Ensure compliance with ISO/IEC 27001, Indian IT Act, DPDP requirements, client cybersecurity obligations, and CERT-In requirements.
• Coordinate VAPT activities, cybersecurity audits, and closure of audit findings.
• Ensure protection, backup, retention, secure transfer, and disposal of organizational information assets.
• Evaluate cybersecurity posture of vendors, consultants, cloud providers, and third‑party service providers.

Qualification & Experience

• Bachelors degree in Computer Science / IT / Cybersecurity / Electronics or related discipline; Master’s degree preferred.
• 12–15 years of experience in Information Security / Cybersecurity / IT Governance with minimum 5 years in leadership role.
• Experience in ISO/IEC 27001 implementation, SOC/SIEM environments, and multi‑location organizations preferred.
• Exposure to engineering consultancy, infrastructure, BIM/GIS environments desirable.

Preferred Certifications

• CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer/Lead Auditor, CEH, CompTIA Security+, CSA, GCIH, CySA+.

Skills & Competencies

• ISMS & SOC management, SIEM monitoring, incident response, cybersecurity risk management, cloud/network security, vendor security assessment, leadership, analytical ability, decision‑making, and stakeholder management.

KPIs

• ISMS compliance status, MTTD & MTTR, vulnerability closure within SLA, reduction in cybersecurity incidents, SOC effectiveness, security awareness effectiveness, and disaster recovery testing success.

Authority

Authorized to recommend cybersecurity controls and investments, initiate cybersecurity investigations/audits, elevate critical cyber risks, enforce compliance with information security policies, and coordinate external cybersecurity assessments.

Working Relationships

• Internal: Management, IMS, IT, HR, Finance, Project Managers, BIM/GIS Teams, Divisional Offices.
• External: Clients, Certification Bodies, Cybersecurity Consultants, IT Vendors, Managed Security Service Providers (MSSPs), CERT‑In empanelled agencies.

Specific Focus Areas

• Conduct organization‑wide cybersecurity awareness and phishing prevention programs.

Key Deliverables

• Information Security Policy Manual & ISMS Documentation.