Group CISO ( Chief Information Security Officer)

State Bank of India (SBI); Mumbai, Navi Mumbai; On-site; INR 22,500,000 - 27,500,000; Full time

Job summary

State Bank of India (SBI) invites applications for engagement as a Specialist Cadre Officer on a contractual basis. The role demands extensive experience in information security, cyber defense, and risk management within banking/financial sectors.

Ideal candidates will possess advanced degrees in CS/IT/EC and certifications like CISSP, CISM, CCISO, or CISA. The engagement spans up to five years with a 3+2 year period and high-level interaction with boards and regulators.

Qualifications

• Basic engineering or MCA/M.Tech/MS in CS/IT/Engg with 50%+ marks.
• University/Institute recognized by Govt. and regulatory bodies.
• Relevant security certifications preferred and valid at interview date.

Responsibilities

• Drive cyber security strategy and regulatory compliance for the bank.
• Coordinate with Board and regulators on cyber risk and governance.
• Oversee SOC operations, threat modelling, monitoring and incident response.
• Lead major security transformation programs and AI-driven security initiatives.
• Ensure DPDP, IT Act and RBI guidelines compliance across IT infrastructure.
• Engage with external agencies for information sharing and risk mitigation.

Skills

CISO / Dy. CISO

Information Security

Cyber Security

Security Operations

Education

B.Tech/BE in CS/IT/EC/Cyber Security

MCA

M.Tech/MS in CS/IT/Engineering

Tools

CISSP

CISM

CCISO

CISA

Job description

Engagement Of Specialist Cadre Officer On Contractual Basis

(Advertisement No: CRPD/SCO/2026-27/21)

Online Registration Of Application & Payment Of Fees: From 04.09.2026 TO 24.09.2026

State Bank of India invites Online applications from eligible Indian citizens for engagement to the following Specialist Cadre Officers Posts on Contractual Basis. Candidates are requested to apply online through the link given on Banks official website https://sbi.bank.in/web/careers

No. Vacancy (Contractual) - Unreserved (UR) - 1

Age (As on 31.08.2026) - Max -57 years

Annual CTC Range** - Upto Rs 2.50 crore

Suggested Place of posting# - Mumbai / Navi Mumbai

Contract Period$ - 5 Years (3+2 years)

Nature of Engagement - Contractual Engagement

Selection Procedure @ - Shortlisting & Interview @ followed by CTC Negotiation

Details Of Educational Qualification, Experience, Skills, Brief Job Profile & Key Responsibility Area

Required Qualifications (As on 31.08.2026)

Basic

B. Tech/ B.E. in Computer Science/ Computer Science & Engineering/ Software Engineering/ Information Technology/ Electronics/ Electronics & Communications Engineering/Cyber Security or Equivalent Degree in above specified disciplines with minimum 50% score.

or

MCA

or

M. Tech/ M. Sc in Computer Science/ Computer Science & Engineering/ Information Technology/ Software Engineering/ Electronics/ Electronics & Communications Engineering/Cyber Security or Equivalent Degree in above specified disciplines.

(From a University/ Institution/ Board recognized by Govt. Of India/ approved by Govt. Regulatory Bodies).

Preferred Certifications:

• i. (Certified Information Systems Security Professional (CISSP).
• ii. Certified Information Security Manager (CISM).
• iii. Certified Chief Information Security Officer (CCISO).
• iv. Certified Information Systems Auditor (CISA).

(The above Certificates should be valid as on the Date of Interview)

Experience (Post Basic Qualifications) & Specific Skills (As on 31.08.2026)

Experience:

The applicant must have at least 15-20 years post qualification experience in Information Technology/ Information Security in Banks/ Large Corporates/ PSUs/ FIs/ Financial Services Organizations/ Financial & Technology Consulting firms, of which minimum 5 years should be in the core domain area of Information Security/Cyber Security/ Cyber Defense in Banks / FIs at Senior Management Level.

Desirable experience detail:

• i) Candidates who have worked as CISO/Dy. CISO would be preferred.
• ii) Experience in Information Security, Cyber Defence, Security Operations, Enterprise Risk Management, Regulatory Compliance, Security Architecture, Cloud Security, and IT Infrastructure.
• iii) Experienced in engaging with Board-level stakeholders, regulators, auditors, and executive leadership to strengthen cyber resilience and support secure business growth.
• iv) Experienced in managing large-scale security transformation programs, leading multidisciplinary teams, overseeing managed security services, implementing AI-driven security operations, and protecting critical financial infrastructure.

Note: Training & Teaching experience will not be counted for eligibility.

Job Profile / KRA

• The CISO shall be responsible for driving cyber security strategy and ensuring compliance to the extant regulatory/ statutory guidelines on information and cyber security.
• The CISO shall be responsible for enforcing the policies that a RE uses to protect its information assets apart from coordinating information/ cyber security related issues within the RE as well as with relevant external agencies.
• The CISO shall be responsible for bringing to the notice of Board/IT sub-committee of the Board about the cyber security risk, the Bank is exposed to and shall put in place to mitigate those Risk.
• Ensuring that periodic tests are conducted to evaluate the adequacy and effectiveness of technical security control measures, especially after each significant change to the IT applications/ systems/ networks as well as after any major incident.
• Articulate, update, and enforce policies to protect the Organisationss information assets.
• Define and oversee the implementation of the Information & Cyber Security Assurance Programme, including governance frameworks, policies, procedures, and guidelines.
• Continuously evaluate, pilot, and implement emerging cybersecurity solutions and industry frameworks
• Develop and implement the Cyber Crisis Management Plan and conduct periodic stress testing to mitigate risks arising from cyber-attacks.
• Integrate security-by-design principles in emerging technologies like AI/ML.
• Coordinate with regulatory and intelligence agencies including RBI, NCIIPC, CERT-In etc. for information sharing and compliance.
• Ensure compliance with the IT Act, Digital Personal Data Protection (DPDP) Act, RBI Cybersecurity Guidelines, and other domestic and international standards.
• Liaise with the Organisations Legal and Compliance teams to interpret regulatory updates and ensure timely security control alignment.
• Thorough understanding of IT Act, Digital Personal Data Protection (DPDP) Act and associated rules thereunder, RBI and other Regulatory Guidelines, CERT-In cyber security circulars etc. and ensure compliance in line with these guidelines.
• Oversee operations of the Security Operations Centre (SOC), including threat modelling & monitoring, detection, and incident response.