The Chief Information Security Officer (CISO) will be responsible for developing, implementing, managing and continually improving information security and cybersecurity strategies across Information Publishing Limited (IPL) Group companies operating globally.
The CISO will lead the IPL Group of companies' Information Security Management System (ISMS), ensuring alignment with ISO/IEC 27001:2022 requirements, applicable regulatory obligations, contractual commitments and recognized information security best practices.
The position requires solid technical knowledge, proven information security leadership, practical ISO 27001 implementation experience and the ability to coordinate cybersecurity activities across multiple companies and countries.
Beyond traditional security operations, the role needs to encompass AI governance, data privacy/ integrity, regulatory compliance, and even physical security or ESG oversight.
This role should act as a business advisor who translates technical risks into business priorities to support decision-making regarding revenue, brand trust, and digital strategy.

Information Security Strategy and Governance

- Develop, implement and maintain a comprehensive information security and cybersecurity strategy aligned with the objectives of IPL Group and its subsidiaries.
- Establish and oversee information security policies, procedures, standards and guidelines.
- Identify and assess security risks within the organization in real time and implement appropriate security measures to mitigate risks.
- To conduct risk assessment activities and work in collaboration with IT teams to develop treatment plans.
- Information Security Risk Assessments

Perform or oversee information security risk assessments covering:

- Information assets and sensitive business information
- IT infrastructure and network environments
- Cloud servers and hosted applications
- Databases and data storage systems
- Software applications and APIs
- Automated data extraction and processing systems
- Regulatory and contractual compliance

Coordinate the implementation and effectiveness of security controls, including:

- Firewalls and network security
- Data encryption and secure communication




- Work actively with IT Infrastructure teams to mitigate security risks and coordinate the management and implementation of security software.

Manage and continually improve the ISMS framework, ISO 27001 policies, procedures and supporting records.

- Coordinate risk assessments across information assets and maintain the information security risk register.
- Maintain the Risk Treatment Plan, assigning responsibilities, actions and target dates, and tracking progress.
- Collect and review ISMS measurement and performance metrics,and monitor the effectiveness of controls and policies.
- Coordinate Information Security Forum (ISF) and management review meetings, including preparation and retention of minutes and action records.
- Monitor implementation of security awareness training and compliance with relevant quality and security policies.

Regulatory Compliance and International Security Requirements

- Ensure that information security practices are aligned with applicable laws, regulations, industry standards and contractual security requirements.
- Coordinate compliance assessments across IPL group companies and international business operations.
- Work with Legal, Compliance and relevant management teams to identify applicable data protection and cybersecurity requirements.
- Support compliance with applicable international data protection obligations, including relevant UK, European, Indian and US requirements.
- Assess security risks associated with international data transfers and cross-border information sharing.
- Review customer and third-party contractual information security obligations.
- Recommend changes to IPL group companies' policies and controls when regulatory requirements change.
- Coordinate and participate in external information security audits.
- Take responsibility for coordinating and oversight or manage information security-related customer due diligence questionnaires (DDQs).
- Work closely with Sales, Business Development, Legal,



IT Infrastructure and operational teams to respond to customer security assessments.
- Review and validate responses to information security questionnaires, supplier assessments and customer compliance requests.
- Identify and manage information security commitments arising from customer contracts and due diligence assessments.
- Support Sales and Business Development teams during client onboarding, vendor registration and contract renewal activities.

Educate staff on appropriate information security practices and applicable regulatory requirements.

- Mentor and support information security professionals, providing guidance and training as required.
- Ensure staff under the CISO's supervision perform their duties in accordance with applicable policies and procedures.
- Support major information security incidents, including agreed on-call escalation and incident response responsibilities.
- Produce concise risk, security performance and financial impact reports for executive and Board-level management.
- Bachelor's degree in Computer Science, Information Technology, Information Security, Cybersecurity or a related or equivalent professional experience.
- Strong knowledge of information security principles, standards, frameworks and practices.
- Formal training or demonstrable professional expertise in ISO/IEC 27001 and information security risk management.
- Evidence of continuous professional development in cybersecurity, information security governance and management.

Professional Experience – Essential

- Minimum 10–15 years of relevant experience in information security, cybersecurity, IT security governance or technology risk management.
- Significant experience in a senior information security management or leadership position.
- Proven experience implementing, managing and maintaining an ISO 27001-based ISMS.
- Demonstrated expertise in IT security, risk management, incident management and technical control oversight.
- Strong analytical, problem-solving, project management, delegation and decision-making skills.

Permanent India-based role supporting globally for IPL Group of companies and cross-border stakeholders.

- Flexible working during peak periods, major incidents, project go-lives or system switchovers as required by the employment contract.

📌 Cyber Security - Information Security Officer (Permanent) (India)
🏢 Exchange Data International (EDI)
📍 India