Chief Information Security Officer (CISO)

Information Security | Cyber Risk | SaaS | Cloud Security

About ZingHR

ZingHR is an AI-powered Human Capital Management (HCM) platform serving enterprise customers across multiple geographies. Our platform handles critical workforce, payroll, compensation and identity data, making security, privacy and resilience fundamental to our business.

The Prospect

We are looking for a seasoned Chief Information Security Officer (CISO) to take complete ownership of enterprise security across our products, platforms, infrastructure and internal systems.

This is a strategic leadership role reporting directly to the Managing Director & Co-founder, with responsibility for building and leading the security function, strengthening cyber resilience and establishing a robust security framework for a growing global SaaS business.

Key Responsibilities

- Own and drive the enterprise-wide information security, cybersecurity, privacy and risk management strategy.
- Develop a long-term security roadmap aligned with NIST CSF and ISO 27001.
- Lead SaaS product security, secure SDLC, application security, API security and cloud security across AWS/Azure environments.
- Ensure robust protection of sensitive payroll, compensation, employee and enterprise customer data.
- Establish and lead VAPT, penetration testing, red team, purple team and vulnerability management programmes.
- Own SOC operations, SIEM, threat intelligence, threat hunting and end-to-end incident response.
- Drive ISO 27001, SOC 2, DPDP Act,



GDPR and other applicable regulatory and compliance requirements.
- Establish AI security governance covering AI-driven threats, prompt injection, model risks and data leakage.
- Lead business continuity, disaster recovery and cyber crisis management.
- Build and scale a high-performing security engineering, GRC, SOC and application security team.
- Present enterprise security posture, risks and mitigation strategies to senior leadership and the Board.

What We Are Looking For

- Proven experience in senior cybersecurity / information security leadership roles.
- Strong experience in enterprise SaaS, cloud platforms, HR Tech, fintech, enterprise technology or similarly data-intensive environments.
- Hands-on understanding of application security, cloud security, infrastructure security and cybersecurity architecture.
- Strong exposure to ISO 27001, SOC 2, NIST, DPDP and GDPR frameworks.
- Demonstrated experience leading VAPT, red teaming, SOC, incident response and enterprise risk management.
- Experience building and managing security teams and influencing C-suite stakeholders.
- Ability to translate complex security risks into business priorities and actionable strategies.

Position Details

- Designation: Chief Information Security Officer (CISO)
- Location: Mumbai
- Work Mode: On-site
- Function: Information Security, Risk & Trust

If you have led enterprise security transformation and are ready to take complete ownership of cybersecurity for a growing SaaS organisation, we would like to hear from you.

📌 Chief Information Security Officer (Mumbai)
🏢 ZingHR
📍 Mumbai