Position: Chief Information Security Officer (CISO)

Location: Gurgaon

Reporting To: CTO

1. ROLE OVERVIEW

The Employee shall be responsible for establishing, implementing, and maintaining the Company’s information security program, aligned with regulatory, business, and technology objectives in a start-up fintech workplace.
1. KEY DUTIES AND RESPONSIBILITIES

(a) Information Security Governance
- Develop and implement information security policies, procedures, and frameworks.
- Ensure alignment with RBI guidelines, ISO 27001, and applicable laws.

(b) Product and Technology Security
- Embed security controls within application architecture, APIs, and cloud infrastructure.
- Oversee secure SDLC and DevSecOps practices.

(c) Regulatory Compliance and Audit
- Manage regulatory audits, internal audits, and external assessments.
- Act as the primary point of contact for auditors and regulatory bodies.

(d) Risk Management
- Identify, assess, and mitigate cyber and information security risks.
- Maintain and update risk registers and mitigation plans.

(e) Incident Management
- Establish incident response frameworks.




- Lead investigation and resolution of security incidents.

(f) Vendor and Third-Party Risk
- Evaluate and monitor security posture of third-party vendors and partners.

(g) Data Protection
- Ensure protection of sensitive data including PII and financial information.
- Implement encryption, access control, and data governance measures.

(h) Team and Capability Development
- Build and manage the information security team.
- Conduct employee awareness programs.

1. PERFORMANCE EXPECTATIONS

- Successful completion of audits without material observations
- No critical security breaches attributable to negligence
- Timely incident detection and response
- Progressive enhancement of security maturity

1. QUALIFICATIONS AND EXPERIENCE

- Relevant experience: 7–15+ years in Information Security
- Experience in fintech, NBFC, banking, or technology-driven environments preferred

1. CERTIFICATIONS (PREFERRED)

- CISSP, CISM or equivalent

📌 Chief Information Security Officer (CISO) (Gurugram)
🏢 Ghrig People Solutions
📍 Gurugram