Job Purpose:-

The Chief Information Security Officer will be responsible for leading and managing the information security, cyber resilience, regulatory security compliance, incident response, vulnerability management, data protection and security governance agenda .

The role will be primarily operational in nature, with approximately 80% focus on day-to-day security operations, regulatory compliance, risk remediation, incident coordination, assurance reviews and control

hygiene, and approximately 20% focus on strategic initiatives, security transformation, capability enhancement and contribution to Group-level cyber security initiatives

Responsibilities:-

A) Security Operations & Incident Resilience:

- Monitor security incidents, alerts, vulnerabilities and operational risk items.
- Coordinate with central SOC / Cyber Fusion Center for investigation, escalation and closure.
- Drive timely response, containment and post-incident corrective actions.
- Track repeat issues, aged items and SLA breaches to closure.
- Maintain incident response readiness through playbooks,



escalation matrices and periodic drills.

B) Regulatory Compliance, Policy & Audit Governance:

- Track and implement applicable regulatory and internal cyber security requirements.
- Support cyber security policy reviews, regulatory inspections, audits and submissions. •
- Coordinate VAPT, cyber audits, incident reporting and compliance evidence. •
- Track audit observations, regulatory gaps, exceptions and action plans to closure. •
- Support Board / Trustee / Technology Committee reporting, as applicable.

C) Security Assurance, VAPT & Risk Reduction:

- Plan and coordinate VAPT, security testing and control reviews.
- Ensure critical assets and internet-facing systems are adequately assessed.
- Track vulnerabilities, exceptions and high-risk findings to closure.
- Coordinate remediation with application, infrastructure, cloud, vendor and business teams.
- Ensure security review of recent systems, major changes and critical go-lives.

📌 Chief Information Security Officer ( For Asset Management Company) (Mumbai)
🏢 Forward
📍 Mumbai