Chief Information Security Officer

Muthoot FinCorp Ltd., the flagship company of the Muthoot Pappachan Group (also known as Muthoot Blue), is one of India&aposs leading non-banking financial companies (NBFCs). With a legacy spanning over 137+ years, the company has established a vast network of over 3,700+ branches across the country, serving more than 100,000 customers daily.

Chief Information Security Officer

Role Summary

The CISO will be responsible for developing and implementing an information security strategy. Identifying and assessing security risks and Implementing security measures to mitigate risks. Ensure compliance with regulations and industry standards and raising security awareness.

Key Attributes

1. Risk Identification, Management and Mitigation
2. Ability to liaison with both internal and external stakeholders.
3. In-depth understanding of NHB guidelines and other relevant regulations.
4. Ability to analyze complex data and identify potential risks and resolve issues.
5. Policy development and administration

Job Responsibilities

• Leading the development and implementation of the information security strategy.
• Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.
• Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.
• Identifying and mitigating security risks, ensuring the organization remains resilient against emerging threats.
• Ensuring the companys compliance with industry standards and regulations.
• Managing security audits, compliance assessments, incident response processes, and investigating security breaches.
• Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.
• Leading security awareness training programs for employees to promote a culture of cybersecurity across the organization.
• Staying updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.
• Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.
• Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches
• Implement and leverage technological solutions for effective risk monitoring and management
• Coordinate and lead in implementation of Business Continuity Plan (BCP).