Chief Information Security Officer

Equirus Wealth; Mumbai; On-site; INR 6,000,000 - 9,000,000; Full time

Job summary

Equirus Wealth in Mumbai seeks a senior information security leader to align security initiatives with business goals, manage risk, and report to the board on financial impacts of security choices.

You will oversee governance and regulatory compliance (DPDP Act, IT Act), coordinate incident response, develop and update policies, train staff, and drive vulnerability management across IT systems to protect client data and preserve trust.

Qualifications

• 15+ years of experience in information security, IT management, or risk management in Finance/FinTech preferred.
• Bachelor’s degree in Information Technology or related field.
• Certifications: CISSP, CISM or CRISC recommended.
• Deep understanding of business operations, budget management, and vendor negotiations.

Responsibilities

• Align security initiatives with business objectives and translate risks into financial impacts for the board.
• Conduct ongoing risk assessments and oversee governance and regulatory compliance (DPDP Act, IT Act).
• Lead security breach response including containment, forensics, and regulatory notifications.
• Develop, implement and review IT and security policies ensuring mandatory regulations.

Skills

LDAP

IAM

IDS

IPS

ALB

SOC/NOC

Education

Bachelor’s degree in Information Technology or related field

CISSP / CISM / CRISC certification

Job description

• Align security initiatives with overall business objectives and translate complex technical risks into financial impacts for the board of directors.
• Conduct continuous risk assessments, oversee governance and compliance with various regulations (e.g., DPDP Act, IT Act), and timely closure of security audits (Cyber, CSCRF, VAPT, ACCP, etc.) and submission to RBI, SEBI, AMFI, BSE, NSE (as applicable).
• Lead the organization's response to security breaches, coordinating containment, forensic investigation, and public/regulatory notifications.
• Develop, implement and review all existing IT and Security policies to ensure strong adherence to mandatory regulations. Guide the company to strategically incorporate non-mandatory policies (thus optimize costs) while keeping customer interest at forefront.
• Conduct employee awareness trainings. Ensure IT systems (internal and 3rd party), people process comply with the policies.
• Identification (VAPT, App Scans) & resolution of System Vulnerabilities. This includes front end (websites/apps), backend (server hardening / updates), network (firewall / switches) and endpoints (anti-virus, port access, software installation, data back-up, etc.).
• Creation / update of Security Policies (Info Sec, CCMP, CSCRF) and driving Security Incident Response.
• Further be able to refine the above policies in alignment with the DPDP Act.

Requirement:

• 15+ years of experience in information security, IT management, or risk management, preferably in Finance / FinTech sector. Exposure of LDAP, IAM, IDS, IPS, ALB systems as well as SOC / NOC is desirable.
• A Bachelor’s degree in Information Technology, or a related field.
• Certified in one / more of Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).
• Deep understanding of business operations, budget management, and vendor negotiations.