:

Role and Responsibilities:

Audit Representation
Act as the primary representative for NPCI and customer audits related to information and cyber security.

Cybersecurity Governance
Drive the organization's cybersecurity strategy and ensure compliance with applicable regulatory/statutory guidelines, particularly those from RBI and NPCI.
Present cyber security risks, initiatives, and preparedness to the Board and its Committees periodically.

Policy Enforcement & Risk Management:
Develop, enforce, and review security policies and controls to protect the organization’s information assets.
Conduct regular risk assessments and manage vulnerability assessments.
Lead the response to emerging threats, incidents, and vulnerabilities.

Security Operations
Establish and enforce information security policies, procedures, and controls.
Develop and manage data classification and handling policies, ensuring data protection by design and by default
Oversee and monitor the Security Operations Centre (SOC).
Ensure all security solutions are functioning effectively.
Drive key cybersecurity projects and ensure timely execution.

Strategic Planning
Identify security goals aligned with business needs
Define and monitor implementation strategies and cybersecurity initiatives.




Estimate and manage the cybersecurity budget and required resources.

Compliance & Standards:
Ensure adherence to standards such as ISO 27001, PCI DSS, and RBI cybersecurity guidelines.
Manage exception handling and ensure compliance across all departments

Incident Response & Resilience:
Plan, manage, and review information/cyber security incidents.
Strengthen the organization's cyber resilience framework.

JD - CISO

Training & Awareness:
Provide regular security awareness training to employees and stakeholders

Stakeholder Engagement
Advise senior management on security architecture and technology decisions
Collaborate effectively with IT teams, compliance, and external partners on security matters

Budgeting and Resource Management
Manage the information security and cybersecurity budget, including investments in tools,

services, and personnel.
Build, retain, and lead a skilled security team, including hiring, training, and performance management.

Reporting and Communication
Report security metrics, incidents, and risk posture to executive leadership and boards.
Act as the primary liaison for regulatory bodies, legal teams, and law enforcement in matters of cybersecurity

📌 Chief Information Security Officer Ciso Mumbai (India)
🏢 Acura Solution
📍 India