CISO & DPO

Locus.sh; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Locus seeks a Chief Information Security Officer to lead the organization’s information security program across global operations. You will shape strategy, governance, risk, and compliance, and guide a team of security professionals working with IT, legal, and business units to safeguard data and sustain regulatory alignment.

The role requires hands-on leadership, deep expertise in ISO 27001/NIST, security operations, threat intelligence, incident response, and third-party risk management as the

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, or related field.
• CISSP, CISM or equivalent certifications are preferred.
• 6–8+ years of information security management experience with hands-on operations, risk and compliance.

Responsibilities

• Develop and implement a comprehensive information security strategy aligned with business goals.
• Establish and maintain security governance with policies, standards, and guidelines.
• Identify, assess, and manage information security risks and implement mitigation plans.
• Oversee security operations including incident response, vulnerability management, and monitoring.
• Lead security awareness, training, and architecture to secure IT landscape.
• Ensure regulatory compliance (ISO 27001, NIST, GDPR/CCPA as applicable).
• Lead vendor risk management and report security posture to executives.

Skills

Leadership

Strategy development

Risk management

Incident response

Security governance

Communication

Education

Bachelor's or Master's in Computer Science or Information Security

Tools

SIEM

Firewalls

Endpoint protection

IDS/IPS

Job description

Chief Information Security Officer (CISO)

About Locus

Battle-tested in 350+ deployments across 30+ countries, Locus is an agentic Transportation Management System for all-mile, all-channel, trusted by enterprises like Unilever, Nestlé, and Siam Makro. The platform unifies orders, capacity, and carrier networks into one living plan, aligning planning, execution, and settlement so promises become proof. AI co-pilots with guardrails surface risk early and recommend the next best move to protect SLAs and reduce empty miles. In 2025, Locus joined the Ingka Group (IKEA Retail) family, marking a major milestone in our journey. Backed by the scale and strength of IKEA, we continue to operate independently while accelerating our mission to make global supply chains faster, smarter, and more sustainable.

Our Journey and Impact Since 2015, Locus has been on a mission to make logistics decision-making intelligent, sustainable, and real-world ready. Our platform has powered billions of deliveries across 30+ countries for global enterprises, driving measurable impact in cost savings, carbon reduction, and SLA performance. With the strength of the IKEA ecosystem behind us, we’re scaling that impact even further.

Our Global Footprint Headquartered in Bangalore, with teams across the U.S., U.K., UAE, and Southeast Asia, Locus brings together 170 + engineers, designers, and problem-solvers united by a single goal: to reinvent how the world moves goods.

We look for people who are:

Global in mindset: curious about diverse markets and ideas.

Unrelenting in drive: energized by complex challenges.

Intelligent in approach: analytical, creative, and thoughtful.

Dynamic in execution: adaptive and decisive in fast-moving contexts.

Exact in craft: detail-oriented and committed to excellence.

Role Description

As the CISO, you will be responsible for developing and implementing an organization- wide information security strategy and framework. You will lead a team of security professionals and work closely with other stakeholders to protect the organization's information assets from security threats and ensure compliance with applicable regulations and industry best practices.

Key Responsibilities:

Information Security Strategy: Develop and implement a comprehensive information

security strategy aligned with the organization's goals and objectives. Ensure the

strategy addresses current and emerging security threats, vulnerabilities, and risks.

Security Governance: Establish and maintain an effective security governance

framework, including policies, procedures, standards, and guidelines. Ensure compliance

with applicable laws, regulations, and industry standards.

Risk Management: Identify, assess, and manage information security risks throughout

the organization. Develop risk mitigation plans and ensure their implementation.

Security Operations: Oversee the day-to-day security operations, including security

incident response, vulnerability management, threat intelligence, security monitoring,

and access control. Ensure the organization has appropriate security tools, technologies,

and processes in place.

Security Awareness and Training: Develop and deliver information security awareness

and training programs to educate employees and contractors about their roles and

responsibilities in protecting information assets.

Security Architecture: Collaborate with IT and other relevant teams to develop and

maintain a secure technology infrastructure. Provide guidance on security requirements

for new systems, applications, and technologies.

Security Compliance: Monitor and enforce compliance with relevant security policies,

standards, and regulations. Conduct periodic security audits and assessments to

identify and address compliance gaps.

Incident Response: Lead the response to security incidents, including investigating and

containing incidents, coordinating with internal teams and external stakeholders, and

implementing remediation measures to prevent future incidents.

Vendor and Third-Party Risk Management: Establish and maintain a vendor and

third-party risk management program to assess and monitor the security posture of

external partners and suppliers.

Security Metrics and Reporting: Define and track key security metrics to measure the

effectiveness of security controls and initiatives. Prepare and present regular reports on

the organization’s security posture to executive management and the board.

Qualifications and Requirements:

Bachelor's or Master's degree in Computer Science, Information Security, or a related

field.

Professional certifications such as CISSP (Certified Information Systems Security

Professional), CISM (Certified Information Security Manager), or equivalent.

Proven experience (typically 6-8+ years) in information security management, including

hands‑on experience in security operations, risk management, and compliance.

Strong knowledge of information security principles, standards frameworks (e.g., ISO

27001, NIST Cybersecurity Framework), and regulations (e.g., GDPR, CCPA).

Experience in developing and implementing information security strategies and

programs.

Familiarity with security technologies, such as firewalls, intrusion detection/prevention

systems, SIEM (Security Information and Event Management), and endpoint protection.

Excellent leadership and team management skills.

Strong communication and presentation abilities, with the ability to articulate complex

security concepts to both technical and non-technical stakeholders.

Analytical mindset and problem‑solving skills to identify and address security risks and

Ability to adapt to a fast‑paced, evolving security landscape and keep up with emerging

threats and trends.

What you should look forward to:

The opportunity to have a strategic impact on the organization’s customer experience

and overall success.

You get to establish yourself as a thought‑leader in the logistics industry and participate

in industry conference and networking events

Autonomy to make key decisions making and influencing key business outcomes.

What We Offer

Join Locus and become part of a visionary team that is redefining logistics through innovation and smart distribution. We provide competitive compensation, comprehensive benefits, and a collaborative environment where your expertise will drive both your growth and that of the organization. Locus is an equal opportunity employer dedicated to creating a diverse and inclusive workplace.