Chief Information Security Officer (CISO) - Mumbai

Role & responsibilities

Role Overview:

The CISO will be responsible for developing, implementing, and overseeing cybersecurity strategy to protect its assets, data, and reputation.

This leadership role involves steering the organizations response to cyber threats, ensuring NHB and RBI compliance, and maintaining a strong and adaptive security posture.

Key Responsibilities:

- Cybersecurity Governance: Establish, implement, and maintain a robust cybersecurity governance framework aligned with industry best practices and regulatory requirements.

- Risk Management: Conduct risk assessments, identify vulnerabilities, and develop mitigation strategies to protect Vastus assets.

- Compliance: Ensure compliance with applicable cybersecurity regulations, standards, and policies, including those from NHB and RBI.

- Incident Response: Develop and maintain incident response plans, procedures, and capabilities to effectively manage and mitigate cyber incidents.

- Threat Intelligence: Collect, analyze, and disseminate threat intelligence to identify and address emerging risks.

- Awareness and Training: Develop and deliver cybersecurity awareness and training programs to employees.

- Technology Oversight: Select, implement, and manage cybersecurity technologies and solutions.

- Vendor Management: Evaluate and manage third-party security risks.

- Regulatory Engagement: Coordinate with regulators and industry peers to stay informed of emerging threats and best practices.

Specific Duties:

- Lead internal response to regulatory requests, audits, and inspections.

- Monitor and ensure compliance with applicable regulations.

- Implement cybersecurity remediation programs.

- Collaborate with branches to identify and mitigate cyber risks.

- Evaluate and manage security exceptions.