Chief Information Security Officer

Religare Housing Development Finance Corporation (RHDFC); Mumbai; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Religare Housing Development Finance Corporation (RHDFC) is seeking an Information Security professional to lead governance, risk management and compliance. The role includes establishing security policies, presenting risk updates to senior management and board, and ensuring RBI/NHB regulatory adherence.

You will implement security controls, perform VAPT, manage third-party risk, support business continuity and security awareness, and produce monthly security dashboards and board reports from

Qualifications

• Establish Information Security policies, standards, procedures, and governance framework.
• Present security posture and risk updates to Senior Management, Board, and IT Strategy Committee.
• Ensure compliance with RBI and NHB Master Directions on Cyber Security
• Coordinate internal and external regulatory audits and inspections.
• Ensure timely closure of audit observations and CERT-IN advisories.
• Support compliance with applicable privacy laws.

Responsibilities

• Implement endpoint security, email security, network security, and cloud security controls.
• Ensure regular vulnerability assessments and penetration testing (VAPT) and remediation.
• Recommend mitigation strategies, monitor KRI and maintain Information Risk Register.
• Ensure protection of confidential customer data.
• Review security architecture of applications.
• Support cloud security implementation.
• Ensure monitoring of critical systems, RCA for incidents.
• Ensure timely incident reporting and conduct post-incident reviews.
• Assess security posture of outsourced vendors and technology partners.
• Conduct Information Security Due Diligence.
• Review vendor compliance.
• Ensure contractual security clauses.
• Support Business Continuity Planning (BCP).
• Conduct Disaster Recovery (DR) drills.
• Develop organization-wide Information Security Awareness Program.
• Deliver cybersecurity training.
• Prepare monthly Information Security Dashboard.
• Report Cyber Security KPIs.
• Present Board-level Information Security reports.

Job description

Role & responsibilities

Information Security Strategy & Governance and Compliance

• Establish Information Security policies, standards, procedures, and governance framework.
• Present security posture and risk updates to Senior Management, Board, and IT Strategy Committee.
• Ensure compliance with RBI and NHB Master Directions on Cyber Security
• Coordinate internal and external regulatory audits and inspections.
• Ensure timely closure of audit observations and CERT-IN advisories.
• Support compliance with applicable privacy laws.

Information Security Risk Management

• Implement endpoint security, email security, network security, and cloud security controls.
• Ensure regular vulnerability assessments and penetration testing (VAPT) and remediation.
• Recommend mitigation strategies, monitor KRI and maintain Information Risk Register.
• Ensure protection of confidential customer data.

Security Operations

• Review security architecture of applications.
• Support cloud security implementation.
• Ensure monitoring of critical systems, RCA for incidents.
• Ensure timely incident reporting and conduct post-incident reviews.

Third Party & Vendor Risk Management

• Assess security posture of outsourced vendors and technology partners.
• Conduct Information Security Due Diligence.
• Review vendor compliance.
• Ensure contractual security clauses.

Business Continuity & Disaster Recovery

• Support Business Continuity Planning (BCP).
• Conduct Disaster Recovery (DR) drills.

Security Awareness

• Develop organization-wide Information Security Awareness Program.
• Deliver cybersecurity training.

Reporting & MIS

• Prepare monthly Information Security Dashboard.
• Report Cyber Security KPIs.
• Present Board-level Information Security reports.