Head, Information Security Centre of Excellence (Corporate)

Role Summary

The Head of Information Security CoE will establish and lead the enterprise cybersecurity strategy, ensuring robust protection of clients and internal systems. This role will build standardized security frameworks, compliance capabilities, and managed security services while enabling secure digital transformation across business units.

Key Responsibilities

- Own the enterprise Information Security & Cybersecurity CoE

- Define and implement security strategy, policies, and governance frameworks

- Lead VAPT, SOC audits, ISO, PCI DSS, and compliance programs

- Establish and manage incident response, threat monitoring, and risk management

- Enable secure-by-design architecture for AI, cloud, and digital platforms

- Build AI-powered cybersecurity capabilities (threat detection, automation)

- Collaborate with delivery teams to embed security in products and services

- Develop managed security service offerings for clients

- Drive certification readiness and audit compliance across the organization

- Driving GTM Strategy

Key Skills & Experience

- 15+ years in Information Security / Cybersecurity leadership roles

- Strong expertise in VAPT, SOC, ISO 27001, PCI DSS, ITAM, compliance audits





- Experience setting up security CoEs or managed security services

- Exposure to AI-driven cybersecurity and blockchain-based compliance

- Solid understanding of enterprise IT, cloud, and regulatory landscapes

- Excellent crisis management and stakeholder communication skills

Qualifications

- Bachelor’s degree in Engineering, Computer Science, Information Technology, Cybersecurity, or related field

- Master’s degree (preferred) in:

- Information Security

- Cybersecurity

- Information Systems

- Risk Management

- Mandatory or highly preferred industry certifications:

- CISSP / CISM / CISA

- ISO 27001 Lead Implementer / Auditor

- CEH / OSCP (for security depth)

- Additional certifications (advantage):

- PCI DSS, SOC, ITIL, Cloud Security (AWS/Azure/GCP)

- Proven leadership experience in enterprise security governance, audits, compliance, or managed security services may be considered in lieu of specific certifications

Success Metrics

- Audit and compliance success rate

- Reduction in security incidents and response time

- Adoption of standardized security frameworks

- Client trust and security-led deal enablement

- Revenue from security and compliance services

📌 Lead CoE info Security (Maharashtra)
🏢 3i Infotech
📍 Maharashtra