Regional Chief Information Security Officer (CISO)

Boku Inc. (BOKU.L) is the leading global provider of local mobile-first payments solutions. Global brands including Amazon, DAZN, Meta, Google, Microsoft, Netflix, Sony, Spotify, and Tencent rely on Boku to reach millions of new paying consumers who do not use credit cards with our purpose-built payment network of more than 300 local payment methods across 70+ countries. Every year, Boku processes over $10 billion in value for our customers. Incorporated in 2008, Boku is headquartered in London and San Francisco and has employees in over 39 countries around the world, including Brazil, China, Estonia, Germany, Ireland, Japan, Singapore, and the UAE. Boku is a truly global company that takes pride in its diversity and thriving equal opportunity workplace.

Role Title : Regional Chief Information Security Officer (CISO)

Department : Security (India)

Reports to : MD, VP - Security and IT

Location : Mumbai (Hybrid)

Role Purpose

Lead and mature the India cybersecurity program for our alternative payment's platform—protecting customer data and transaction integrity, reducing operational and regulatory risk, and enabling compliant growth. The Regional CISO (India) partners closely with Group Security, Group GRC, local Compliance, and Operational Resilience (OpRes) to align policies and controls, uplift the India resilience programme, and drive the ongoing maturity of security capabilities

Key Responsibilities

Governance, Risk & Compliance (India)

• Establish and maintain a Board-approved information & cyber security policy and India risk appetite.
• Chair security governance forums; brief the India Board / Risk Committee quarterly on posture, incidents, and remediation status.
• Run security awareness programs, secure-by-design training for engineering, and executive tabletop exercises.
• Work in lockstep with Group Security and GRC to align policies, standards, control objectives, and risk taxonomies; coordinate with local Compliance to ensure country-specific obligations are embedded in the ISMS.

Regulatory compliance (India)

Incident response & reporting (India)

Audit, assurance & continuous improvement

Operational Resilience & Capability Maturity (India)

Measures of Success

Audit & Regulatory Compliance

90-day aged items).

Regulatory Engagement & Inspections

Operational Resilience & BCP / DR

Third-Party & Outsourcing Risk

Governance & Reporting

Key Skills And Competencies

Nice to Have

Qualifications

Skills Required

Cloud Security, Cybersecurity, Regulatory Compliance, Incident Response, Cissp, System Audit, Risk Management, crisc , Cism