Chief Information Security Officer (CISO) Department: Executive Management / Information Security

Reports To: Chief Executive Officer (CEO)

Ⅰ.

Position

Overview The Chief Information Security Officer (CISO) is responsible for establishing and leading the company's overall information security strategy, cybersecurity governance, and enterprise-wide risk protection framework. This executive oversees the protection of the company's digital infrastructure, confidential business information, financial data, technology systems, and critical information assets while ensuring that security practices are aligned with corporate objectives and regulatory requirements.

The CISO works closely with the CEO, executive leadership team, and technology leaders to identify cybersecurity risks, strengthen information security policies, oversee security operations, and establish effective risk prevention and incident response mechanisms. This role plays a critical part in protecting the company's operational integrity, maintaining stakeholder confidence, and ensuring the security and resilience of its technology and business infrastructure.

The ideal candidate combines extensive executive leadership experience with deep cybersecurity expertise, strong risk management capabilities, and the ability to develop comprehensive information security strategies within complex business environments.

Ⅱ. Key Responsibilities 1. Enterprise Information Security Strategy: Develop and oversee the company's information security strategy, establish cybersecurity priorities, and ensure that security initiatives support corporate objectives and long-term business requirements.

- Cybersecurity Risk Management: Identify, assess, and mitigate enterprise-wide cybersecurity risks, oversee vulnerability management, and establish security controls to protect critical systems, confidential information, and digital assets.
- Security Governance & Compliance: Establish information security policies, governance frameworks, internal control standards, and compliance procedures to support regulatory obligations and industry best practices.




- Security Operations & Incident Response: Oversee cybersecurity monitoring, threat detection, incident response, and disaster recovery strategies while ensuring the organization can effectively prevent, respond to, and recover from security incidents.
- Executive Leadership & Security Development: Advise the CEO and senior leadership team on cybersecurity strategy, technology risks, information protection, and security investments while building a capable information security team and strengthening organizational security awareness.

Ⅲ. Qualifications Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related field.

20 years of total professional experience, with a substantial background in information security, cybersecurity, IT risk management, or technology leadership.

12 years of relevant executive-level management experience overseeing enterprise information security, cybersecurity operations, technology risk, or large-scale security programs.

Demonstrated experience developing and implementing enterprise-wide cybersecurity strategies, security governance frameworks, and information protection programs.

Robust expertise in cybersecurity risk assessment, network security, cloud security, identity and access management, data protection, and security incident response.

Proven ability to manage complex security environments, lead multidisciplinary technical teams, and establish effective security policies and internal controls.

Comprehensive understanding of information security regulations, data privacy requirements, technology risk management, and business continuity planning.

Exceptional executive communication, strategic thinking, analytical, problem-solving,



and organizational leadership capabilities.

Ⅳ. Preferred Qualifications Previous experience serving as a Chief Information Security Officer, Chief Information Officer, Vice President of Information Security, Senior Director of Cybersecurity, or equivalent senior technology executive.

Background in investment management, financial services, fintech, asset management, digital finance, or other technology-intensive business environments.

Experience protecting financial systems, investment platforms, digital assets, confidential transaction information, and sensitive corporate data.

Familiarity with cybersecurity frameworks and standards such as NIST Cybersecurity Framework, ISO/IEC 27001, SOC 2, and relevant financial industry security requirements.

Experience overseeing enterprise security architecture, cloud infrastructure protection, third-party security assessments, and cybersecurity transformation initiatives.

Proven ability to establish scalable security programs, strengthen organizational resilience, and integrate cybersecurity risk management into overall corporate governance.

Ⅴ. What Success Looks Like During the first 12 months, the successful candidate will be expected to:

- Establish a comprehensive enterprise-wide information security strategy and governance framework.
- Conduct an initial cybersecurity risk assessment and identify critical security vulnerabilities.
- Develop and implement company-wide information security policies and procedures.
- Strengthen protection of corporate systems, financial information, and confidential business data.
- Establish effective cybersecurity monitoring, threat detection, and incident response capabilities.
- Implement appropriate access controls, identity management, and data protection standards.
- Develop business continuity, disaster recovery, and cybersecurity incident response plans.
- Establish regular cybersecurity reporting and risk assessments for executive leadership.
- Build a scalable information security team and strengthen the company's long-term cybersecurity capabilities.

📌 Chief Information Security Officer (Mundra)
🏢 Cynergy-Global
📍 Mundra