Chief Information Security Officer - Cyber Security

About the Opportunity : Our client is a fast-growing, technology-led financial services organisation with a strong digital presence and a wide portfolio of investment and financial products. As the organisation continues to scale, it is looking to appoint a Chief Information Security Officer (CISO) to lead its information and cyber-security agenda across technology, applications, cloud infrastructure and business platforms. This is a high-impact leadership role combining Board-level security governance, regulatory compliance, cyber-risk management and technical security leadership. Key Responsibilities : - Own and continuously strengthen the organisation's overall information and cyber-security strategy, policies and framework. - Provide regular cyber-security reporting to the Board, IT/Risk/Audit Committees and senior leadership. - Lead security governance and ensure compliance with applicable SEBI, CERT-In, AMFI, DPDP Act and other regulatory requirements. - Drive the organisation's cyber-security posture across cloud, network, applications, APIs and enterprise platforms. - Lead SOC, incident response, cyber forensics, RCA and remediation, including regulatory reporting within prescribed timelines. - Own and oversee VAPT, cyber audits, red-teaming, threat hunting, cyber drills and security assessments. - Drive implementation of Zero Trust, IAM/PAM, SIEM/SOAR, EDR/XDR, DevSecOps/Secure SDLC and security architecture. - Strengthen protection of sensitive customer, KYC, financial and personal data. - Own third-party/vendor cyber-risk management, including security assessment of critical technology and business partners. - Drive BCP/DR, cyber resilience and security awareness across the organisation. - Act as the key cyber-security interface with SEBI, exchanges, CERT-In, AMFI and other relevant regulatory bodies. Ideal Candidate : - 10 - 15+ years of experience in information/cyber security, with at least 5 years in a senior security leadership role. - Strong preference for candidates from BFSI, broking, AMC, depository, wealth management, fintech or other highly regulated financial-services environments. - Prior experience as a CISO / Deputy CISO / Head of Information Security / Head of Cyber Security would be preferred. - Strong understanding of SEBI CSCRF, SEBI regulations applicable to financial markets, AMFI, CERT-In directions and DPDP Act 2023. - Strong technical understanding of cloud security, SIEM/SOAR, EDR/XDR, IAM/PAM, DevSecOps, secure API/microservices architecture and cryptography/key management. - Experience managing security teams, external security partners, audits and incident-response functions. - Excellent Board-level communication, stakeholder management and crisis-management capabilities. - Relevant certifications such as CISSP, CISM, CISA, ISO 27001 LA or CEH preferred. Cloud/security certifications such as CCSP, OSCP, GCIH/GCFA would be an advantage. - Engineering/technology degree or equivalent qualification preferred.