CISO (Chief Information Security Officer)

Array Job Solutions; Mumbai; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Array Job Solutions in Mumbai seeks a seasoned Chief Information Security Officer to lead the development and execution of the company’s information security strategy, protecting data and technology assets while aligning security with business goals.

You will build robust policies, manage audits, and drive incident response, collaborating with IT, legal, and compliance teams to stay ahead of regulatory requirements and emerging threats.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 6+ years of demonstrable experience as a Chief Information Security Officer or similar.
• Knowledge of information security principles, frameworks (NIST, ISO 27001, DDPA), and risk management.

Responsibilities

• Develop and lead security programs including cyber defence, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritise remediation.
• Oversee incident detection, response, and recovery to mitigate breaches.

Skills

Leadership

Information security

Risk management

Regulatory compliance

Cybersecurity frameworks

Incident response

Cloud security

Data protection

Communication

Team leadership

Education

Bachelor's degree in Information Security/Computer Science

Master's degree (preferred)

Tools

Firewalls

Intrusion Detection Systems

SIEM

DLP

Encryption protocols

Job description

Objectives of this role

• Leading the development and implementation of the companys information security strategy.
• Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.
• Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.
• Identifying and mitigating security risks, ensuring the organisation remains resilient against emerging threats.
• Ensuring the companys compliance with industry standards and regulations.
• Managing security audits, compliance assessments, incident response processes, and investigating security breaches.
• Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.

Key tasks

• Develop, implement, and maintain a comprehensive security program that includes cyber defence, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritise remediation efforts to reduce risk exposure.
• Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.

Public

• Manage the security architecture, tools, and technologies deployed across the organisations IT infrastructure.
• Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws, such as IRDA Cyber Laws, RBI, CERT- IN, Meity, DDPA.
• Monitor security metrics and report on the organisations security posture to executive leadership.
• Lead security awareness training programs for employees to promote a culture of cybersecurity across the organisation.
• Stay updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.

Required skills and qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 6+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.
• Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001,DDPA), and risk management practices.
• Working knowledge of security auditing, vulnerability assessments, and risk mitigation.
• Experience with security technologies such as firewalls, intrusion detection systems, SIEMs,DLP, and encryption protocols.
• Solid knowledge of data privacy regulations and compliance requirements.
• Ability to develop and implement complex security strategies.
• Strong leadership and communication skills, with the ability to influence decision-making at the executive level.
• Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.
• Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.

Preferred skills and qualifications

• Master’s degree in Cybersecurity, IT, or related fields.

Public

• Relevant certifications in cybersecurity, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).
• Experience with cloud security and securing cloud infrastructure SAAS platforms.
• Familiarity with incident management and disaster recovery planning.
• Knowledge of ethical hacking and penetration testing techniques.
• Background in regulatory compliance and data privacy laws in the industry.
• Hands-on experience with SIEM tools, firewalls, DLP and intrusion detection systems.
• Expertise in secure software development and DevSecOps practices.