Chief Information Security Officer (CISO)

Location: Mumbai | Work Mode: Work From Office | Experience: 13+ Years | Level: Senior Leadership / CISO |
Notice Period: Immediate / Quick Joiners Preferred

About the Role

We are looking for an experienced Chief Information Security Officer (CISO) with 13+ years of experience to lead and
strengthen the organization's overall information security, cybersecurity governance, risk, compliance, and assurance
strategy. This is a senior leadership position responsible for defining and executing cybersecurity strategy,
strengthening security governance, managing enterprise security risks, and ensuring alignment with business,
regulatory, customer, and industry requirements.
The CISO will work closely with senior leadership, executive management, IT, SOC, HR, Legal, Procurement,
Business teams, customers, vendors, and auditors to establish a strong and resilient security posture. The ideal
candidate should have strong leadership experience across Cybersecurity Strategy, Information Security
Governance, GRC, ISO 27001, SOC 2, Enterprise Risk Management, TPRM, Data Protection, Cloud Security,
Security Operations, AI Governance, and AI GRC.

Key Responsibilities
Define and drive the organization's overall cybersecurity and information security strategy, aligned with business
objectives and enterprise risk appetite.
Provide senior leadership and strategic direction across Information Security, Cybersecurity GRC, Security
Operations, Risk, Compliance, and Assurance functions.
Establish and maintain information security governance, policies, standards, frameworks, and control mechanisms.
Own and maintain ISO 27001 and ISO 14001 requirements and provide leadership oversight for SOC 2 and other
applicable compliance frameworks.
Lead enterprise information security risk assessments, risk treatment, control effectiveness, risk acceptance, and
compliance monitoring.
Establish and maintain the enterprise security risk register and ensure timely mitigation and closure of identified
risks.
Lead internal, external, surveillance, customer, regulatory, and third-party security audits and ensure timely closure




of audit findings.
Drive customer security assessments, due diligence questionnaires, contractual security requirements, and
security commitments.
Provide strategic oversight of Third-Party Risk Management (TPRM), including vendor security assessments,
contractual controls, risk remediation, and ongoing monitoring.
Provide governance and leadership oversight across SOC, SIEM, EDR, DLP, vulnerability management, VAPT,
incident management, and security monitoring functions.
Drive data protection, privacy, information classification, DLP, and data leakage prevention initiatives.
Establish security governance for cloud environments, critical IT assets, applications, infrastructure, and security
monitoring coverage.
Oversee VAPT, vulnerability management, remediation, access reviews, privileged access, IAM, and security
control assessments.
Define and implement AI Governance and AI GRC frameworks covering AI risk assessment, responsible AI, data
protection, privacy, security controls, regulatory requirements, and emerging AI-related risks.
Evaluate and govern AI/GenAI adoption and emerging technology risks, including security, privacy, data leakage,
third-party AI risks, model-related risks, and compliance requirements.
Develop and maintain AI security and AI risk management policies, standards, controls, and governance
mechanisms.
Lead cybersecurity awareness, information security training, and executive security awareness programs.
Provide leadership during major security incidents, cyber crises, business continuity, and disaster recovery events.
Strengthen cyber resilience, incident response, crisis management, and continuous security improvement
capabilities.
Develop and present security, risk, compliance, cyber maturity,



and audit metrics to senior leadership and
management.
Act as a key cybersecurity representative with customers, auditors, regulators, strategic partners, and other
external stakeholders.
What We're Looking For
13+ years of experience in Information Security, Cybersecurity, Cybersecurity GRC, Security Governance, Risk &
Compliance, or related domains.
Proven experience in a CISO / Deputy CISO / Head of Information Security / Head of Cybersecurity / senior
security leadership role.
Strong experience in developing and executing enterprise cybersecurity strategy and security roadmaps.
Strong leadership experience managing security, GRC, risk, compliance, and assurance functions.
Excellent knowledge of ISO 27001 with strong exposure to SOC 2 and other security/compliance frameworks.
Strong experience in enterprise security risk management, risk assessments, control assessments, remediation,
and security governance.
Experience leading internal, external, customer, regulatory, and third-party audits.
Strong exposure to customer security assessments, due diligence, security questionnaires, and contractual
security requirements.
Strong experience in TPRM / Vendor Risk Management and third-party security governance.
Valuable understanding of SOC, SIEM, EDR, DLP, IAM, VAPT, vulnerability management, incident response, and
security monitoring.
Strong experience in data protection, privacy, information classification, and DLP governance.
Strong understanding of cloud security and technology risk management.
Hands-on exposure to AI Governance, AI GRC, Responsible AI, AI Risk Management, GenAI security, AI privacy,
and emerging technology governance.
Excellent executive communication, stakeholder management, influencing, presentation, and decision-making
skills.
Ability to engage confidently with CXOs, senior management, customers, auditors, regulators, vendors, and
cross-functional leadership teams.
Preferred Certifications
CISSP
CISM
CISA
CRISC
ISO 27001 Lead Auditor / Lead Implementer
CCSP
AI Governance / AI Risk / Responsible AI certifications

📌 Chief Information Security Officer (CISO) (India)
🏢 Cyberidentitysolutions
📍 India