Talent.com
Chief Information Security Officer (CISO) - Indian BFSI - 15 years+

Chief Information Security Officer (CISO) - Indian BFSI - 15 years+

datavrutiAnantapur, IN
16 hours ago
Job description

Job Title : Chief Information Security Officer (CISO)

Location : Mumbai - Work From Office

Reporting To : Chief Risk Officer (with dual reporting to Board Risk / Audit Committee)

Sector : General Insurance

Experience : 15+ years in Information Security with leadership exposure in BFSI, ideally Insurance or FinTech

Salary : 50LPA+ based on fitment

Role Overview

  • The Chief Information Security Officer (CISO) will define and implement the company’s end-to-end Information Security framework, ensuring secure design, regulatory readiness, and operational resilience as the company moves from 0 to 1.
  • This is a strategic yet hands-on leadership role, ideal for someone who has managed security at scale in a regulated BFSI / Insurance environment, and now wants to build a secure-by-design foundation for a cloud-native, API-driven, AI-powered insurance platform.
  • The CISO will anticipate and pre-empt risks by leveraging prior experience, ensuring that the company’s technology-led innovation is always backed by enterprise-grade security and compliance discipline.

Key Responsibilities

1. Information Security Strategy & Governance

  • Define and implement the enterprise-wide Information Security strategy, encompassing governance, risk management, data protection, and cybersecurity.
  • Establish security policies, frameworks, and control baselines in alignment with IRDAI, CERT-In, ISO 27001, and DPDP Act.
  • Build a scalable ISMS (Information Security Management System) from the ground up.
  • 2. Cloud, Application & API Security

  • Review and work with engineering teams to develop secure architecture design for cloud-native systems, APIs, and microservices.
  • Review implemented automated controls for containerized and serverless environments.
  • Ensure security by design is baked into engineering processes through DevSecOps practices and CI / CD pipelines.
  • 3. Cybersecurity Operations & Threat Management

  • Set up and oversee Security Operations (SOC), including SIEM, SOAR, and vulnerability management.
  • Build detection and response capability tailored for API-driven, AI-heavy applications.
  • Lead threat intelligence, incident response, and post-incident reviews.
  • 4. AI & Data Security

  • Develop frameworks for secure and responsible AI / ML model governance, including data lineage, model access control, and risk mitigation for bias and data leakage.
  • Protect customer and training data in compliance with DPDP and data residency norms.
  • 5. Regulatory & Compliance Management

  • Ensure readiness for IRDAI cyber security and IT governance audits.
  • Collaborate with Compliance and Legal teams for ongoing adherence to regulatory reporting and certifications (ISO 27001, SOC 2, etc.).
  • Build documentation and audit trails for pre-emptive compliance.
  • 6. Third-Party & Ecosystem Security

  • Design and enforce Third-Party Risk Management (TPRM) framework for partners, TPAs, technology vendors, and data processors.
  • Conduct due diligence and continuous monitoring of vendor security posture.
  • 7. Business Continuity & Resilience

  • Establish cloud-native BCP / DR plans, aligned with IRDAI requirements.
  • Lead incident and crisis management drills to validate resilience under simulated failures.
  • 8. Security Culture & Awareness

  • Foster a security-first culture across engineering, product, and operations teams.
  • Conduct awareness programs, red / blue team simulations, and executive security workshops.
  • 9. Leadership & Board Engagement

  • Advise leadership and Board Risk / Audit Committee on key threats, mitigation strategies, and regulatory posture.
  • Build and mentor an internal security team capable of scaling with the business.
  • Desired Profile

  • 15+ years in Information Security, with at least 5 years in senior InfoSec roles at Insurance, NBFC, Bank, or FinTech.
  • Experience securing cloud-native, API-driven, or AI / ML-intensive platforms.
  • Strong grasp of IRDAI, CERT-In, DPDP Act, and global security standards.
  • Proven ability to design and operationalize security frameworks from zero, while ensuring future scalability.
  • Strong collaboration with Product, Engineering, and Risk teams.
  • Qualifications / Certifications

  • Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
  • Preferred certifications : CISSP, CISM, CCSP, ISO 27001 LA, AWS Security Specialty, CRISC.
  • Familiarity with frameworks like NIST CSF, Zero Trust Architecture, and OWASP API Security Top 10.
  • Key Behavioural Attributes

  • Strategic foresight backed by operational pragmatism.
  • Startup agility with an enterprise governance mindset.
  • Strong executive presence and regulatory confidence.
  • Builder-leader who can “set up from scratch” yet think “at scale.”
  • Ethical, transparent, and decisive under pressure.
  • Create a job alert for this search

    Information Security • Anantapur, IN

    Related jobs
    • Promoted
    Chief Executive Officer

    Chief Executive Officer

    Alliance Recruitment Agencyananthapur, andhra pradesh, in
    Position : Chief Executive Officer / Business Head.Pharmaceutical retail / pharmacy.Location : Belgavi but can work remotely from anywhere in India. Business Planning and Execution.Team Leadership and ...Show moreLast updated: 2 days ago
    • Promoted
    Information Technology Governance Consultant

    Information Technology Governance Consultant

    INSPYR SolutionsAnantapur, IN
    Job Opening : Governance, Risk & Compliance (GRC) Analyst – Level 2 / 3.Governance, Risk, and Compliance (GRC) Analyst.SaaS applications while helping define governance frameworks and risk processes.S...Show moreLast updated: 26 days ago
    • Promoted
    SOC / NOC Team Lead (Tier-2) – MSSP Operations (India-Based, Full-Time)

    SOC / NOC Team Lead (Tier-2) – MSSP Operations (India-Based, Full-Time)

    Symosis SecurityAnantapur, IN
    Symosis is a cybersecurity consulting firm purpose-built for the AI-native, cloud-first era.We help public-sector and enterprise clients mature their security operations through managed services, o...Show moreLast updated: 11 days ago
    • Promoted
    IICS Developer (Oracle to Snowflake Migration)

    IICS Developer (Oracle to Snowflake Migration)

    infocognize INCananthapur, andhra pradesh, in
    Job Opening : IICS Developer (Oracle to Snowflake Migration).PM IST – 1 : 30 AM EST (Night Shift).Contract / Full-time (based on availability and fit). This is a remote opportunity with night-shift hou...Show moreLast updated: 19 days ago
    • Promoted
    Senior Information Technology Audit Manager

    Senior Information Technology Audit Manager

    Bahwan CyberTekAnantapur, IN
    Role : Information Technology Auditor.We are seeking a highly experienced and motivated.Information Technology Auditor.Group Internal Audit team of BCT. This role requires a minimum of 12 years of ex...Show moreLast updated: 26 days ago
    • Promoted
    Senior Cloud Engineer

    Senior Cloud Engineer

    AptonetAnantapur, IN
    Senior Cloud Developer – Offshore (India | Remote).Contract Role | Multi-Cloud Security Projects | Cutting-Edge AI & Automation. This role offers the opportunity to work on.Python preferred; also Ja...Show moreLast updated: 21 days ago
    • Promoted
    Principal Architect

    Principal Architect

    Altudoananthapur, andhra pradesh, in
    Altudo is seeking a Principal Architect to act as the India-based lead within the Chief Architect’s Office (CAO).This role is critical in extending architectural leadership, supporting incident res...Show moreLast updated: 30+ days ago
    • Promoted
    Oracle Cloud Security and Risk Management (RMC) Consultant

    Oracle Cloud Security and Risk Management (RMC) Consultant

    AtomAnantapur, IN
    Job Title : Oracle Cloud Security and Risk Management (RMC) Consultant.We are seeking an experienced Oracle Cloud Security and Risk Management (RMC) Consultant to join our team.The ideal candidate w...Show moreLast updated: 30+ days ago
    • Promoted
    SailPoint ISC Developer

    SailPoint ISC Developer

    TechDemocracyAnantapur, IN
    SailPoint Identity Security Cloud (ISC) Developer.The ideal candidate will have hands-on experience with SailPoint ISC (IdentityNow), including configuration, customization, workflow design, and in...Show moreLast updated: 11 days ago
    • Promoted
    IT / Computer security Analyst as Admin Executive

    IT / Computer security Analyst as Admin Executive

    KMM Infotech Solutions Private LimitedAnantapur, IN
    Job Title : IT / Computer Security Analyst as Admin Executive.We are seeking a proactive, detail-oriented .Security Consultant in driving key security initiatives across the organization.This role i...Show moreLast updated: 30+ days ago
    • Promoted
    SAP IDM / IAS / IPS / IAM Consultant | PAN India

    SAP IDM / IAS / IPS / IAM Consultant | PAN India

    Tata Consultancy Servicesananthapur, andhra pradesh, in
    Skill : SAP IDM / IAS / IPS / IAM, BTP.Notice Period : Max 60 Days Only • •.SAP Security / IAM experience with at least 3+ years in IAS / IPS. Strong hands-on expertise in SAP IAS (SSO, SAML 2.OAuth, OpenID Conn...Show moreLast updated: 21 days ago
    • Promoted
    Sr. Lead - Cloud Security

    Sr. Lead - Cloud Security

    Sycamore Informatics Inc.Anantapur, IN
    Cloud security framework; Strong scripting skills with PowerShell and.Solid understanding of version control tools, particularly Git. Experience with cloud platforms, including AWS, Azure and GCP.Pr...Show moreLast updated: 30+ days ago
    • Promoted
    • New!
    Head Information Technology | One of the leading university in South India

    Head Information Technology | One of the leading university in South India

    FyndBridge Consultants & AdvisorsAnantapur, IN
    We are hiring for one of our reputed client in Higher education.The Director – IT is a senior leadership role responsible for driving the Information Technology and Knowledge Management strategy.As...Show moreLast updated: 10 hours ago
    • Promoted
    • New!
    Illumio- Zero Trust Microsegmentation

    Illumio- Zero Trust Microsegmentation

    CareerXperts ConsultingAnantapur, IN
    Hiring : Manager - Zero Trust Microsegmentation.Bengaluru | 💼 5+ Years Experience.Lead Illumio microsegmentation implementations. Design & deploy Zero Trust policies.Analyze network infrastructure &...Show moreLast updated: 16 hours ago
    • Promoted
    OT Security Consultant

    OT Security Consultant

    iO Associatesananthapur, andhra pradesh, in
    Operational Technology (OT) Cybersecurity Consultant.An excellent opportunity has arisen for an experienced.The company helps organizations strengthen their digital defenses and ensure compliance w...Show moreLast updated: 10 days ago
    • Promoted
    Cyber Security GRC Consultant ( Hybrid : Pune)

    Cyber Security GRC Consultant ( Hybrid : Pune)

    DigiHelic Solutions Pvt. Ltd.Anantapur, IN
    This role involves assisting in the execution of cybersecurity policies, conducting risk assessments, participating in audits, and evaluating third-party risk. You will contribute to aligning busine...Show moreLast updated: 7 days ago
    • Promoted
    • New!
    Senior Security Architect

    Senior Security Architect

    DautomAnantapur, IN
    Role : Senior Security Architect.Location : Offshore, India (Remote).You’ll drive end-to-end security design across platforms, lead threat modeling and control gap assessments, oversee IT security r...Show moreLast updated: 10 hours ago
    • Promoted
    (Immediate joiners only)Senior Cybersecurity SOC Engineer – Threat Hunting & Incident Response

    (Immediate joiners only)Senior Cybersecurity SOC Engineer – Threat Hunting & Incident Response

    Triune Infomatics Incananthapur, andhra pradesh, in
    Role : Senior Cybersecurity SOC Engineer – Threat Hunting & Incident Response.Working Hours : Monday to Friday, 9 AM – 5 PM PST (U. Reporting To : Security Operations (SecOps) Leader – USA.We are seeki...Show moreLast updated: 30+ days ago