- 20+ years of experience in information and cybersecurity, including 5+ years in a CISO or CISO-1 role within a software product company.
- 10+ years of hands-on cloud and application security experience, including threat modeling, Secure by Design, Zero Trust, Defense in Depth, and SAST/DAST/SCA practices.
- 5+ years of direct experience managing regulatory requirements in Healthcare and/or Financial Services, including frameworks such as HIPAA, HITRUST, SOC 2, and PCI-DSS.
- Own the security strategy, governance, and risk posture across the AI Platforms (AIP) portfolio, including Engineering Platforms (Flowsource, Neuro IT Ops, Neuro AI Engineering, Skygrade, Ignition) and Business Platforms (TriZetto, Meritsoft, OrderServ),



with a mandate to implement a contemporary AI-native and cloud-native security operating model.
- Experience building or maturing a security function within a platform or product organization undergoing legacy-to-cloud modernization.
- Strong understanding of envelope encryption, KMS/HSM architectures, and workload identity separation, with the ability to engage engineering leaders as a technical peer.
- Experience with M&A; technical and security due diligence, including post-acquisition remediation planning.
- Ability to work effectively across time zones with US-based stakeholders and clients in healthcare and financial services.

📌 Head - CISO (Mumbai)
🏢 Golden Opportunities
📍 Mumbai