Company Description Crystal Peak is a new-age HR consulting firm that supports growing organizations through recruiting, employer branding, and HR transformation solutions. Founded by experienced HR leaders from global corporates, the firm blends deep HR expertise with practical business insight to deliver measurable, customized talent solutions.

Crystal

Peak’s vision is to empower businesses and individuals by driving growth with precision talent strategies, innovation, and integrity. The company focuses on the evolving future of work at the intersection of AI and human connection, maintaining a strong human touch in all client and candidate interactions. Team members join a culture that values impact, collaboration, and forward-looking thinking in the HR and talent space.

Role Description The Chief Information Security Officer (CISO) is a full-time, on-site role based in Bengaluru. This role is responsible for defining and owning the organization’s information security vision, strategy, and roadmap, ensuring alignment with business objectives and regulatory requirements.

Day-to-day responsibilities include leading the design and implementation of information security policies and standards, overseeing cybersecurity operations and incident response, and managing application and data security across core systems and platforms. The CISO will collaborate closely with executive leadership, technology teams, and business stakeholders to perform risk assessments, drive security awareness programs, and ensure robust business continuity and disaster recovery planning.



The role also includes vendor risk management, compliance oversight, reporting security posture to senior leadership, and building a high-performing security team and culture.

Qualifications

- Strong expertise in Information Security and Information Security Management, with a track record of developing and implementing enterprise-wide security frameworks.
- Advanced knowledge of Cybersecurity practices, including threat detection, incident response, vulnerability management, and security operations.
- Experience in Application Security, including secure software development lifecycle (SDLC), code review practices, and protection of web and cloud-based applications.
- Proven capability in Business Continuity planning and disaster recovery, ensuring minimal disruption and rapid recovery from security incidents.
- Extensive experience in senior security leadership roles, preferably as CISO or equivalent, in complex or high-growth organizations.
- Solid understanding of relevant regulations, standards, and frameworks (e.g., ISO 27001, NIST, GDPR, SOC 2) and their practical implementation.
- Excellent stakeholder management, communication, and decision-making skills, with the ability to translate technical risk into business terms.
- Bachelor’s or master’s degree in Information Security, Computer Science, Engineering, or a related field; professional certifications such as CISSP, CISM, or CCISO are highly desirable.
- Ability to work on-site in Bengaluru and collaborate effectively with cross-functional teams in a dynamic environment.

📌 Chief Information Security Officer (Bengaluru)
🏢 Crystal Peak
📍 Bengaluru