Zurich Kotak - Chief Information Security Officer

Kotak Mahindra Bank Limited; Mumbai; On-site; INR 25,00,000 - 35,00,000; Full time

Job summary

A prominent banking institution in Mumbai is seeking a Chief Information Security Officer to lead and manage the information security governance, risk, and compliance. The ideal candidate will have over 15 years of professional experience in information security, strong leadership skills, and the ability to communicate effectively across departments. A university degree or equivalent, along with relevant certifications (CISSP, CISA, CISM), is preferred. This position requires a transformative leader who can enhance security capabilities to navigate future business challenges.

Qualifications

• 15+ years of professional experience with 10+ years in information security or related fields.
• Experience in leading teams in a complex matrix environment.
• Ability to communicate security-related concepts to both technical and non-technical staff.

Responsibilities

• Oversee information security governance.
• Lead information security risk and compliance efforts.
• Manage application security and cloud initiatives.
• Conduct security awareness and education programs.
• Respond to security incidents and threats.
• Guide people management and development within the security team.

Skills

Information Security governance

Risk Management

Consulting and influencing skills

Change management

Team leadership

Education

University degree or equivalent experience

Tools

CISSP certification

CISA certification

CISM certification

Job description

Chief Information Security Officer

Responsibilities

• Information Security governance
• Information Security & Risk Reporting
• Information Security Risk and Compliance
• Application Security & Cloud
• Security Awareness & Education
• Security Incident Response
• Security Threat Intelligence
• People Management and Development

Qualifications

• University degree or equivalent experience.
• 15+ years professional experience with 10+ years in information security or related fields.
• Ability to operate at senior management level using highly developed consulting and influencing skills, and able to communicate security‑related concepts to a broad range of technical and non‑technical staff.
• Ability to be a change agent to transform and streamline an organization and enhance capabilities to meet current and future business drivers.
• Strong risk management and information security skills.
• Experience in leading teams in a complex matrix environment.
• CISSP, CISA, and CISM certifications is a plus.