Chief Information Security Officer

Yotta Data Services Private Limited; Mumbai; On-site; INR 6,000,000 - 9,000,000; Full time

Job summary

Yotta Data Services Private Limited in Mumbai seeks a Chief Information Security Officer (CISO) to lead the organization's information security strategy and governance. You will oversee security policy, risk management, incident response, and regulatory compliance to safeguard data and infrastructure.

The role requires 20+ years of experience in information security or IT infrastructure, with certifications such as CISM and CISA preferred, and strong leadership to drive security across functions

Qualifications

• Bachelor's degree in Engineering, Computer Science, Information Systems or related discipline.
• Master's degree or MBA preferred.
• 20+ years of progressive experience in Information Security, Cybersecurity, Risk Management, or IT Infrastructure.

Responsibilities

• Develop and implement a comprehensive information security strategy aligned with the organization's business objectives.
• Assess security risks and establish security policies, procedures, standards, and guidelines.
• Lead incident response and coordinate containment, eradication and recovery activities.
• Oversee day-to-day security operations, monitoring and tools.
• Ensure compliance with regulatory requirements and audits.

Skills

Leadership

Mentoring

AutoCAD

Drawings understanding

Reliability engineering

Coordination

Documentation

Communication

Strategic vision

Change leadership

Learning agility

Customer focus

Analytical thinking

Drive for results

Team building

Collaboration

Education

Bachelor's degree in Engineering/CS/IS

Master's degree or MBA

Tools

AutoCAD

Job description

Job Description – Chief Information Security Officer (CISO)

Job Location : Mumbai

Job Scope

The Chief Information Security Officer (CISO) is a senior executive responsible for overseeing and managing the security of an organization's information assets. The CISO develops and implements the organization's information security strategy while ensuring the confidentiality, integrity, and availability of data, systems, and technology infrastructure.

Job Responsibilities

Information Security Strategy & Planning

• Develop and implement a comprehensive information security strategy aligned with the organization's business objectives.
• Assess security risks and establish security policies, procedures, standards, and guidelines.
• Drive continuous improvement of the organization's security posture.
• Identify security risks, vulnerabilities, and threats across the organization.
• Conduct risk assessments and implement appropriate security controls.
• Ensure compliance with applicable regulatory and industry requirements.
• Lead the response to information security incidents and cyberattacks.
• Coordinate investigation, containment, eradication, and recovery activities.
• Implement preventive measures to minimize the likelihood of future incidents.

Security Operations

• Oversee day-to-day security operations and security monitoring activities.
• Manage security tools, technologies, and processes.
• Analyze security events and emerging threats.
• Coordinate with internal teams and external service providers to ensure effective security operations.

Security Awareness & Training

• Foster a security-conscious culture across the organization.
• Develop and conduct security awareness and training programs.
• Educate employees on security best practices and emerging cyber threats.

Compliance & Governance

• Ensure compliance with applicable information security regulations, standards, and frameworks.
• Maintain security documentation and evidence for audits.
• Collaborate with internal and external stakeholders to demonstrate compliance.

Datacenter Responsibilities

A datacenter is a centralized facility that houses computer systems and associated infrastructure, including servers, networking equipment, storage systems, and security devices. It provides a secure and controlled environment to support the reliable operation of critical IT infrastructure.

Physical Infrastructure

• Ensure datacenter infrastructure is designed and maintained with redundant power supplies, backup generators, cooling systems, fire suppression systems, and physical access controls.
• Safeguard IT assets against power failures, environmental hazards, and unauthorized access.

Server & Storage Infrastructure

• Oversee server and storage infrastructure supporting enterprise applications, databases, and services.
• Ensure optimal performance, availability, and capacity management.

Networking Infrastructure

• Manage robust networking infrastructure, including switches, routers, and firewalls.
• Ensure secure, high-speed, and reliable connectivity across internal and external networks.

Security Measures

• Implement layered security controls, including:
• Physical security (CCTV surveillance, biometric access controls, security personnel).
• Logical security (firewalls, intrusion detection/prevention systems, encryption, endpoint protection).

Redundancy & High Availability

• Ensure datacenter resilience through redundant power, network connectivity, backup systems, and failover mechanisms.
• Minimize downtime and maximize business continuity.

Datacenter Management

• Monitor datacenter performance and resource utilization.
• Perform capacity planning, system provisioning, hardware maintenance, and infrastructure monitoring.
• Ensure efficient and reliable datacenter operations.

Overall, the datacenter serves as the backbone of the organization's IT infrastructure by providing the necessary environment, resources, and security controls to support critical business operations while ensuring the availability, confidentiality, and integrity of data and services.

Compliance & Organizational Responsibilities

• Follow and comply with Yotta's management system policies, including QMS, EMS, OHS, ISMS, PIMS, ITSM, and other applicable policies.
• Complete all mandatory training programs communicated from time to time.
• Participate in risk assessment activities.
• Contribute toward achieving departmental and management system objectives.
• Assist in maintaining Privacy Information Management System (PIMS) controls throughout the personal data lifecycle.

Good-to-Have Skills

• Strong leadership, mentoring, and technical solution development capabilities.
• Good working knowledge of AutoCAD software.
• Ability to understand Civil, Electrical, HVAC, and Fire Fighting drawings in AutoCAD.
• Ability to understand and execute reliability engineering requirements.
• Strong coordination skills with operations and cross-functional teams.
• Excellent documentation, record-keeping, written communication, and verbal communication skills.
• Strategic Vision & Purpose
• Effective Communication & Skillful Conversation
• Leading Change with Composure
• Learning Agility
• Customer Focus
• Analytical Thinking
• Drive for Results & Ownership
• Team Building
• Collaboration & Relationship Management

Qualifications & Experience

Education :

• Bachelor's degree in Engineering, Computer Science, Information Systems, or a related discipline.
• Master's degree or MBA is preferred.

Experience

• 20+ years of progressive experience in Information Security, Cybersecurity, Risk Management, or IT Infrastructure.

Preferred Certifications

• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)