Role & responsibilities

- Leading the development and implementation of the Company's information security strategy.
- Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.
- Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.
- Identifying and mitigating security risks, ensuring the organization remains resilient against emerging threats.
- Ensuring the Company's compliance with industry standards and regulations.
- Managing security audits, compliance assessments, incident response processes, and investigating security breaches.
- Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.
- Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations.
- Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.
- Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.
- Manage the security architecture, tools, and technologies deployed across the organization's IT infrastructure.
- Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws, such as IRDA Cyber Laws, RBI, CERT-IN, Meity, DDPA.
- Monitor security metrics and report on the organization's security posture to executive leadership.
- Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization.
- Stay updated on cybersecurity trends, technologies,



and best practices to enhance security measures proactively.

Preferred candidate profile

- Bachelors degree in Information Security, Computer Science, or a related field.
- 6+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.
- Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001,DDPA), and risk management practices.
- Working knowledge of security auditing, vulnerability assessments, and risk mitigation.
- Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, DLP, and encryption protocols.
- Solid knowledge of data privacy regulations and compliance requirements.
- Ability to develop and implement complex security strategies.
- Robust leadership and communication skills, with the ability to influence decision-making at the executive level.
- Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.
- Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.
- Experience with cloud security and securing cloud infrastructure & SAAS platforms.
- Familiarity with incident management and disaster recovery planning.
- Knowledge of ethical hacking and penetration testing techniques.
- Background in regulatory compliance and data privacy laws in the industry.
- Hands-on experience with SIEM tools, firewalls, DLP and intrusion detection systems.
- Expertise in secure software development and Dev Sec Ops practices.
- Understanding of artificial intelligence and machine learning applications in security.

📌 Chief Information Security Officer (Mumbai)
🏢 HDFC Sales
📍 Mumbai