Chief Information Security Officer - BFSI

Location: Bangalore / Chennai

Experience: 10 - 15 years

Industry: BFSI / Financial Services

Function: Information & Cyber Security

About the Opportunity:

Our client is a fast-growing, technology-led financial services organisation with a strong digital presence and a wide portfolio of investment and financial products.

As the organisation continues to scale, it is looking to appoint a Chief Information Security Officer (CISO) to lead its information and cyber-security agenda across technology, applications, cloud infrastructure and business platforms.

This is a high-impact leadership role combining Board-level security governance, regulatory compliance, cyber-risk management and technical security leadership.

Key Responsibilities:

• Own and continuously strengthen the organisation's overall information and cyber-security strategy, policies and framework.
• Provide regular cyber-security reporting to the Board, IT/Risk/Audit Committees and senior leadership.
• Lead security governance and ensure compliance with applicable SEBI, CERT-In, AMFI, DPDP Act and other regulatory requirements.
• Drive the organisation's cyber-security posture across cloud, network, applications, APIs and enterprise platforms.
• Lead SOC, incident response, cyber forensics, RCA and remediation, including regulatory reporting within prescribed timelines.
• Own and oversee VAPT, cyber audits, red-teaming, threat hunting, cyber drills and security assessments.
• Drive implementation of Zero Trust, IAM/PAM, SIEM/SOAR, EDR/XDR, DevSecOps/Secure SDLC and security architecture.
• Strengthen protection of sensitive customer, KYC, financial and personal data.
• Own third-party/vendor cyber-risk management, including security assessment of critical technology and business partners.
• Drive BCP/DR, cyber resilience and security awareness across the organisation.
• Act as the key cyber-security interface with SEBI, exchanges, CERT-In, AMFI and other relevant regulatory bodies.

Ideal Candidate:

• 10 - 15+ years of experience in information/cyber security, with at least 5 years in a senior security leadership role.
• Strong preference for candidates from BFSI, broking, AMC, depository, wealth management, fintech or other highly regulated financial-services environments.
• Prior experience as a CISO / Deputy CISO / Head of Information Security / Head of Cyber Security would be preferred.
• Strong understanding of SEBI CSCRF, SEBI regulations applicable to financial markets, AMFI, CERT-In directions and DPDP Act 2023.
• Strong technical understanding of cloud security, SIEM/SOAR, EDR/XDR, IAM/PAM, DevSecOps, secure API/microservices architecture and cryptography/key management.
• Experience managing security teams, external security partners, audits and incident-response functions.
• Excellent Board-level communication, stakeholder management and crisis-management capabilities.
• Relevant certifications such as CISSP, CISM, CISA, ISO 27001 LA or CEH preferred. Cloud/security certifications such as CCSP, OSCP, GCIH/GCFA would be an advantage.
• Engineering/technology degree or equivalent qualification preferred.

#CISO #CyberSecurity #InformationSecurity #BFSI #CyberRisk #SEBI #CloudSecurity #CyberSecurityLeadership