Head Cyber & IT

Michael Page; Mumbai; On-site; INR 6,000,000 - 9,000,000; Full time

Benefits offered by this job

Leadership opportunity

Exposure to high-impact technology domains

Collaborative culture with visibility to top leadership

Role based in Mumbai

Job summary

A leading global recruitment agency is seeking a Cybersecurity Leader based in Mumbai. The role focuses on enhancing enterprise cyber resilience, aligning cyber assurance with global standards, and building capabilities across teams. Ideal candidates should have over 15 years of experience in cybersecurity, strong knowledge of regulatory frameworks, and relevant degrees or certifications. This position offers significant influence over group-level technology risk practices and exposure to top leadership in a collaborative culture.

Qualifications

• 15+ years of experience in cybersecurity, ISMS audits, or digital assurance.
• Strong knowledge of regulatory frameworks such as GDPR, NIST, and Zero Trust.
• Professional certifications such as CISA, CISSP, CISM, CRISC.
• Knowledge of GDPR, NIST, DPDP, CERT-In, Zero Trust.

Responsibilities

• Align cyber assurance approaches with global standards.
• Support business audit teams in scoping IT processes.
• Develop tools and training for auditors.
• Capability Building: Develop tools, templates, training, and analytic mechanisms for auditors.
• Regulatory & Compliance Alignment: Align with internal audit standards and regulatory/board mandates.
• High‑Risk Coverage: Ensure focused coverage of critical cyber and technology risk areas and verify remediation.

Skills

Cybersecurity expertise

Risk analysis

Stakeholder management

Communication

Education

BTech (IT/CS) plus MBA or master's in Cybersecurity

Professional certifications such as CISA, CISSP, CISM, CRISC

Job description

• * Shape enterprise cyber resilience
• * Drive group‑wide tech assurance

About Our Client

Our client is a large, diversified conglomerate with multiple business units and complex risk profiles. The organization places significant emphasis on strong governance, cyber resilience, and maintaining best‑in‑class technology controls across all operations.

Job Description

Key Responsibilities

1. Benchmarking with Best Practices
   • Align cyber and technology assurance approaches with global standards and leading frameworks.
   • Translate framework requirements into practical audit and control testing procedures.
   • Continuously update playbooks and maturity models based on emerging practices
2. Enterprise Risk Coverage
   • Support business audit teams in scoping and testing IT processes and controls.
   • Use risk‑based sampling and evidence‑driven analysis to validate design and operating effectiveness
3. Cyber & IT Risk Governance / Assurance
   • Define audit priorities aligned with standards, board expectations, threat landscape, and technology evolution.
   • Build and refresh a risk‑based assurance plan using threat intelligence, criticality, control maturity, and past audit insights.
   • Ensure audit observations translate into clear ownership and risk acceptance decisions.
4. Capability Building
   • Develop tools, templates, training, and analytical mechanisms to enhance auditor and stakeholder capability.
5. Regulatory & Compliance Alignment
   • Ensure alignment with internal audit standards and regulatory/board mandates.
   • Map and test controls based on regulatory and contractual requirements.
   • Produce governance‑ready reporting for Board and Audit Committee review.
6. High‑Risk Coverage
   • Ensure focused coverage of critical cyber and technology risk areas across businesses.
   • Identify high‑risk domains based on exposure, criticality, history, and threat levels.
   • Validate remediation and perform closure verification.

The Successful Applicant

• Candidates from Consulting and Big 4s are most preferred
• BTech (IT/CS) plus MBA or master's in Cybersecurity, Computer Science, or Information Security.
• Professional certifications such as CISA, CISSP, CISM, CRISC.
• ~15+ years of experience in cybersecurity, ISMS audits, technology risk, or digital assurance.
• Knowledge of regulatory frameworks such as GDPR, NIST, DPDP, CERT‑In, Zero Trust.

What's on Offer

• A leadership opportunity driving cyber and technology assurance across a complex conglomerate.
• Exposure to high‑impact technology domains and enterprise‑wide risk programs.
• Collaborative culture with visibility to top leadership and governance bodies.
• Role based in Mumbai with significant influence across group‑level technology risk practices.