Information Security Operation Head

Asirvad; Thrissur; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Asirvad is seeking an Information Security Operation Head (AGM) to lead day-to-day security operations, manage SOC/SIEM, network security, and security tools, and drive the execution of the organization’s information security strategy under the CISO.

The role requires 6–8 years in information security, with leadership experience and certifications in CISM/CISA. Hindi proficiency is mandatory to coordinate with cross-functional teams and regulators.

Qualifications

• 6 to 8 years of information security experience.
• Hindi language proficiency required.
• Experience leading SOC, network security, and security assessments.
• Knowledge of RBI MD, ISO 27001, PCI DSS.

Responsibilities

• Direct and execute information security strategy under CISO.
• Lead day-to-day security operations and teams.
• Oversee incident management and root-cause analysis.
• Ensure regulatory alignment and audit readiness.
• Refine security policies and playbooks.
• Drive security awareness and training.
• Represent CISO in PRM meetings when required.

Skills

Leadership

Incident management

Regulatory compliance

SIEM experience

Security operations

Stakeholder management

Education

B.Tech in CS/Cybersecurity

M.Tech or related postgraduate

Tools

SIEM platforms

Network security

Job description

Job Description: Information Security Operation Head

Position Overview

• Job Title: Information Security Operation Head
• Grade: Assistant General Manager (AGM)
• Reporting To: Chief Information Security Officer (CISO)
• Department: Information Security

Job Summary

The Information Security Operation Head (AGM) is responsible for leading day-to-day security operations, managing security teams (SOC/SIEM, Network Security, and Security Tools), and ensuring the execution of the organization's overall information security strategy under the guidance of the CISO.

This role serves as a key driver for incident management, regulatory compliance, risk mitigation, and security process optimization while working closely with senior leadership and department heads to foster a security-first culture.

Key Result Areas (KRAs)

• Strategic Execution & Leadership: Direct and execute the information security strategy as per CISO guidance. Lead daily operational activities and team development across all security functions.
• Stakeholder Management: Collaborate with senior management and department heads to ensure security initiatives are executed effectively and without business disruption.
• Incident Management & Response: Oversee end-to-end security incident handling, ensuring prompt resolution, proper escalation, root-cause analysis, and reporting to the CISO.
• Compliance & Regulatory Alignment: Ensure operational alignment with industry best practices and regulatory frameworks (e.g., RBI MD, ISO 27001, PCI DSS).
• Governance & Process Optimization: Lead continuous refinement of security policies, operational standards, and playbooks to address evolving security threats.
• Security Awareness & Culture: Drive security training programs and awareness campaigns across the organization to foster a security-first culture.

Key Performance Indicators (KPIs)

• Operations & Team Leadership: Maintain seamless execution and performance across SOC/SIEM, Network Security, and Security Tools teams through regular review meetings and ongoing operational guidance.
• Incident Management & Root-Cause Analysis: Ensure swift, effective incident handling aligned with response protocols, conduct quarterly root-cause reviews, and maintain timely reporting to the CISO.
• Regulatory Compliance & Reporting: Guarantee 100% adherence to compliance frameworks (ISO 27001, PCI DSS, RBI MD), submit accurate monthly compliance reports, and ensure continuous audit readiness.
• Security Strategy & Risk Mitigation: Regularly review emerging security risks with the CISO and refine operational strategies to stay aligned with organizational goals and evolving threat landscapes.
• Process & Workflow Optimization: Proactively identify operational bottlenecks and implement continuous process improvements across all security domains.
• Executive Representation: Represent the CISO in Project Review Management (PRM) meetings when required, ensuring security considerations align with business and project progress.
• Training & Security Awareness: Oversee monthly technical training for security teams and drive enterprise-wide security awareness campaigns.

Educational Qualifications & Certifications

• Education:
• Required: B.Tech in Computer Science, Cybersecurity, or a related field.
• Preferred: M.Tech or relevant postgraduate qualification.
• Certifications:
• Mandatory: CISM (Certified Information Security Manager) OR CISA (Certified Information Systems Auditor).
• Preferred / Optional: CISSP (Certified Information Systems Security Professional), CEH (Certified Ethical Hacker).

Experience Requirements

• Total Experience: 6 to 8 years of experience in Information Security.
• Language Proficiency: Hindi (Mandatory) Full professional working proficiency.
• Leadership Experience: Proven track record of leading and managing security teams (SOC, Network Security, Security Assessment).
• Domain Knowledge: Strong hands-on exposure to SIEM, network defence, incident handling, and regulatory security frameworks (RBI MD, ISO 27001, PCI DSS).