Chief Information Security Officer

Hdfc Sales; Mumbai City; On-site; INR 4,000,000 - 10,000,000; Full time

Job summary

Unknown is seeking a Chief Information Security Officer to lead the design and execution of its information security strategy in line with regulatory requirements. You will protect data and assets, drive risk management, and coordinate with legal and compliance teams to ensure IRDA/CERT-IN-like compliance.

The role emphasizes building a robust security program across IT and business operations, with a focus on threat detection, incident response, and secure software practices.

Qualifications

• Bachelor's degree in information security, computer science, or related field.
• 6+ years of senior cybersecurity leadership experience (e.g., CISO).
• Extensive knowledge of security principles and frameworks (NIST, ISO 27001,DDPA).
• Experience with firewalls, IDS, SIEMs, DLP and encryption technologies.
• Strong leadership and outstanding executive communication skills.

Responsibilities

• Lead the development and implementation of the company's information security strategy.
• Oversee protection of data, IP, and tech assets from cyber threats.
• Develop and enforce security policies, procedures, and regulatory alignment.
• Identify and mitigate security risks; ensure organizational resilience.
• Ensure compliance with industry standards and regulations.
• Manage audits, assessments, incident response, and breach investigations.
• Collaborate with cross-functional teams to integrate security into IT and business ops.
• Develop and maintain a comprehensive security program (cyber defense, data protection, security operations).
• Conduct risk assessments, identify vulnerabilities, and prioritize remediation.
• Oversee security incident detection, response, and recovery.
• Manage security architecture, tools, and technologies across IT.
• Coordinate with legal/compliance to ensure data protection laws compliance.
• Monitor security metrics and report posture to executives.
• Lead security awareness training for employees; foster cybersecurity culture.
• Stay updated on trends, technologies, and best practices.

Skills

Leadership

Communication

Risk management

Regulatory compliance

Security architecture

Incident response

DevSecOps

Cloud security

Threat intelligence

Data privacy

AI/ML security

Education

Bachelor's degree in Information Security, Computer Science, or a related field

Tools

Firewalls

Intrusion Detection Systems

SIEMs

DLP

Encryption protocols

Cloud security tools

Job description

Role & responsibilities

• Leading the development and implementation of the Company's information security strategy.
• Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.
• Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.
• Identifying and mitigating security risks, ensuring the organization remains resilient against emerging threats.
• Ensuring the Company's compliance with industry standards and regulations.
• Managing security audits, compliance assessments, incident response processes, and investigating security breaches.
• Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.
• Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.
• Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.
• Manage the security architecture, tools, and technologies deployed across the organization's IT infrastructure.
• Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws, such as IRDA Cyber Laws, RBI, CERT-IN, Meity, DDPA.
• Monitor security metrics and report on the organization's security posture to executive leadership.
• Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization.
• Stay updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.

Preferred candidate profile

• Bachelors degree in Information Security, Computer Science, or a related field.
• 6+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.
• Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001,DDPA), and risk management practices.
• Working knowledge of security auditing, vulnerability assessments, and risk mitigation.
• Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, DLP, and encryption protocols.
• Solid knowledge of data privacy regulations and compliance requirements.
• Ability to develop and implement complex security strategies.
• Strong leadership and communication skills, with the ability to influence decision-making at the executive level.
• Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.
• Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.
• Experience with cloud security and securing cloud infrastructure & SAAS platforms.
• Familiarity with incident management and disaster recovery planning.
• Knowledge of ethical hacking and penetration testing techniques.
• Background in regulatory compliance and data privacy laws in the industry.
• Hands-on experience with SIEM tools, firewalls, DLP and intrusion detection systems.
• Expertise in secure software development and Dev Sec Ops practices.
• Understanding of artificial intelligence and machine learning applications in security.