CISO - Mumbai

Jobitus; Mumbai; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Jobitus in Mumbai seeks an experienced Information Security leader to drive strategy, governance, and regulatory alignment with RBI/NHB guidelines. You will lead risk management, security operations, third-party risk, and BC/DR, reporting to the Board and coordinating audits.

The ideal candidate has 12–16 years in BFSI, interacts with regulators, and holds a Bachelor’s or Master’s in IT or Cyber Security. This role is based in Mumbai with on-site requirements.

Qualifications

• Bachelor’s/Master’s degree in IT or Cyber Security.
• 12 to 16 years of experience in Bank, Housing Finance Company, NBFC, Financial Services or BFSI organisation.
• Experience interacting with RBI/NHB regulators and Board-level Information Security Committees is highly desirable.

Responsibilities

• Establish Information Security policies, standards, procedures, and governance framework.
• Present security posture and risk updates to Senior Management, Board, and IT Strategy Committee; ensure RBI/NHB compliance.
• Coordinate internal and external regulatory audits and inspections; close audit observations and CERT-IN advisories.
• Implement endpoint, email, network, and cloud security controls; conduct regular VAPT and remediation.
• Assess security posture of outsourced vendors and conduct due diligence; ensure contractual security clauses.
• Support Business Continuity Planning and Disaster Recovery drills.
• Develop and deliver organization-wide Information Security Awareness Program; provide cybersecurity training.
• Prepare monthly Information Security Dashboard; report cyber KPIs to Board.

Skills

Information Security

Governance

Risk Management

Security Operations

Vendor Risk

Education

Bachelor’s/Master’s degree in IT or Cyber Security

Job description

Key Responsibilities Areas

Information Security Strategy & Governance and Compliance

• Establish Information Security policies, standards, procedures, and governance framework.
• Present security posture and risk updates to Senior Management, Board, and IT Strategy Committee. Ensure compliance with RBI and NHB Master Directions on Cyber Security
• Coordinate internal and external regulatory audits and inspections.
• Ensure timely closure of audit observations and CERT-IN advisories.
• Support compliance with applicable privacy laws.

Information Security Risk Management

• Implement endpoint security, email security, network security, and cloud security controls.
• Ensure regular vulnerability assessments and penetration testing (VAPT) and remediation.
• Recommend mitigation strategies, monitor KRI and maintain Information Risk Register.
• Ensure protection of confidential customer data.

Security Operations

• Review security architecture of applications.
• Support cloud security implementation.
• Ensure monitoring of critical systems, RCA for incidents.
• Ensure timely incident reporting and conduct post-incident reviews.

Third Party & Vendor Risk Management

• Assess security posture of outsourced vendors and technology partners.
• Conduct Information Security Due Diligence.
• Review vendor compliance.
• Ensure contractual security clauses.

Business Continuity & Disaster Recovery

• Support Business Continuity Planning (BCP).
• Conduct Disaster Recovery (DR) drills.

Security Awareness

• Develop organization-wide Information Security Awareness Program.
• Deliver cybersecurity training.

Reporting & MIS

• Prepare monthly Information Security Dashboard.
• Report Cyber Security KPIs.
• Present Board-level Information Security reports.

Qualification

• Bachelor’s/Master’s degree in IT or Cyber Security Experience
• 12 to 16 years of experience in Bank, Housing Finance Company, NBFC, Financial Services or BFSI organisation
• Experience interacting with RBI/NHB regulators and Board-level Information Security Committees is highly desirable