Group CISO ( Chief Information Security Officer)

Engagement Of Specialist Cadre Officer On Contractual Basis

(Advertisement No: CRPD/SCO/2026-27/21)

Online Registration Of Application & Payment Of Fees: From 04.09.2026 TO 24.09.2026

State Bank of India invites Online applications from eligible Indian citizens for engagement to the following Specialist Cadre Officers Posts on Contractual Basis. Candidates are requested to apply online through the link given on Banks official website https://sbi.bank.in/web/careers

Instructions To The Candidates:

1. The process of Registration is complete only when fee is deposited with the Bank through online mode on or before the last date for payment of fee.

2. Before applying, candidates are requested to ensure that they fulfil the eligibility criteria for the Post as on the date of eligibility.

3. Candidates are required to upload all required documents (resume, ID proof, age proof, PwBD Certificate (if applicable), educational qualification, experience etc.) failing which their application/candidature will not be considered for shortlisting/ interview.

4. Short listing will be provisional without verification of documents. Candidature will be subject to verification of all details/ documents with the original when a candidate reports for interview (if called).

5. In case a candidate is called for interview and is found not satisfying the eligibility criteria (Age, Educational Qualification and Experience etc.) he/ she will neither be allowed to appear for the interview nor be entitled for reimbursement of any travelling expenses.

6. Candidates are advised to check Banks official website https://sbi.bank.in/web/careers/current-openings regularly for details and updates (including the list of shortlisted/ selected candidates). The Call (letter/ advice), where required, will be sent by e-mail only (NO HARD COPY WILL BE SENT).

7. ALL REVISIONS/ CORRIGENDUM (IF ANY) WILL BE HOSTED ON THE BANKS WEBSITE ONLY.

8. In case more than one candidate scores same marks as cut-off marks in the final merit list (common marks at cut-off point), such candidates will be ranked in the merit according to their age in descending order.

9. HARD COPY OF APPLICATION & OTHER DOCUMENTS NOT TO BE SENT TO THIS OFFICE.

10.TEACHING & TRAINING EXPERIENCE WILL NOT BE COUNTED FOR ELIGIBILITY.

No. Vacancy (Contractual) - Unreserved (UR) - 1

Age (As on 31.08.2026) - Max -57 years

Annual CTC Range** - Upto Rs 2.50 crore

Suggested Place of posting# - Mumbai / Navi Mumbai

Contract Period$ - 5 Years (3+2 years)

Nature of Engagement - Contractual Engagement

Selection Procedure @ - Shortlisting & Interview @ followed by CTC Negotiation

Details Of Educational Qualification, Experience, Skills, Brief Job Profile & Key Responsibility Area:

Required Qualifications (As on 31.08.2026)

Basic:

B. Tech/ B.E. in Computer Science/ Computer Science & Engineering/ Software Engineering/ Information Technology/ Electronics/ Electronics & Communications Engineering/Cyber Security or Equivalent Degree in above specified disciplines with minimum 50% score.

or

MCA

or

M. Tech/ M. Sc in Computer Science/ Computer Science & Engineering/ Information Technology/ Software Engineering/ Electronics/ Electronics & Communications Engineering/Cyber Security or Equivalent Degree in above specified disciplines.

(From a University/ Institution/ Board recognized by Govt. Of India/ approved by Govt. Regulatory Bodies).

Preferred Certifications:

i. (Certified Information Systems Security Professional (CISSP).

ii. Certified Information Security Manager (CISM).

iii. Certified Chief Information Security Officer (CCISO).

iv. Certified Information Systems Auditor (CISA).

(The above Certificates should be valid as on the Date of Interview)

Experience (Post Basic Qualifications) & Specific Skills (As on 31.08.2026)

Experience:

The applicant must have at least 15-20 years post qualification experience in Information Technology/ Information Security in Banks/ Large Corporates/ PSUs/ FIs/ Financial Services Organizations/ Financial & Technology Consulting firms, of which minimum 5 years should be in the core domain area of Information Security/Cyber Security/ Cyber Defense in Banks / FIs at Senior Management Level.

Desirable experience detail:

i) Candidates who have worked as CISO/Dy. CISO would be preferred.

ii) Experience in Information Security, Cyber Defence, Security Operations, Enterprise Risk Management, Regulatory Compliance, Security Architecture, Cloud Security, and IT Infrastructure.

iii) Experienced in engaging with Board-level stakeholders, regulators, auditors, and executive leadership to strengthen cyber resilience and support secure business growth.

iv) Experienced in managing large-scale security transformation programs, leading multidisciplinary teams, overseeing managed security services, implementing AI-driven security operations, and protecting critical financial infrastructure.

Note: Training & Teaching experience will not be counted for eligibility.

Job Profile / KRA

• The CISO shall be responsible for driving cyber security strategy and ensuring compliance to the extant regulatory/ statutory guidelines on information and cyber security.
• The CISO shall be responsible for enforcing the policies that a RE uses to protect its information assets apart from coordinating information/ cyber security related issues within the RE as well as with relevant external agencies.
• The CISO shall be responsible for bringing to the notice of Board/IT sub-committee of the Board about the cyber security risk, the Bank is exposed to and shall put in place to mitigate those Risk.
• Ensuring that periodic tests are conducted to evaluate the adequacy and effectiveness of technical security control measures, especially after each significant change to the IT applications/ systems/ networks as well as after any major incident.
• Articulate, update, and enforce policies to protect the Organisationss information assets.
• Define and oversee the implementation of the Information & Cyber Security Assurance Programme, including governance frameworks, policies, procedures, and guidelines.
• Continuously evaluate, pilot, and implement emerging cybersecurity solutions and industry frameworks
• Develop and implement the Cyber Crisis Management Plan and conduct periodic stress testing to mitigate risks arising from cyber-attacks.
• Integrate security-by-design principles in emerging technologies like AI/ML.
• Coordinate with regulatory and intelligence agencies including RBI, NCIIPC, CERT-In etc. for information sharing and compliance.
• Ensure compliance with the IT Act, Digital Personal Data Protection (DPDP) Act, RBI Cybersecurity Guidelines, and other domestic and international standards.
• Liaise with the Organisations Legal and Compliance teams to interpret regulatory updates and ensure timely security control alignment.
• Thorough understanding of IT Act, Digital Personal Data Protection (DPDP) Act and associated rules thereunder, RBI and other Regulatory Guidelines, CERT-In cyber security circulars etc. and ensure compliance in line with these guidelines.
• Oversee operations of the Security Operations Centre (SOC), including threat modelling & monitoring, detection, and incident response.
• Conduct regular information and cyber security assurance audits, vulnerability assessments (VA), penetration testing (PT), and red-team/blue-team exercises.
• Oversee Threat Intelligence functions - monitoring dark web activity, geopolitical threats, and supply chain vulnerabilities.
• Ensure identity and access management (IAM), privileged access management (PAM), and endpoint security controls are to enforce across the Company.
• Develop, test, and update Business Continuity and Disaster Recovery protocols/plans.
• Collaborate with IT, business departments, and regional offices to identify and manage cyber security risks.
• Obtain top management approval on IS security plan, budget, resources etc.
• Oversee the development of Information Security Awareness training programmes and promote security culture in the Bank.
• Regularly brief top management, Risk Management Committee and the Board Risk/IT Committee on cyber security posture, risks, compliance, and initiatives.
• Oversee the development and ensure presentation of executive dashboards and key metrics on risk, compliance, incident management, and overall security posture to senior management and the Board.
• Ensure transparent communication with stakeholders (internal and external) during cyber incidents as per crisis communication protocols.

Remarks: KRAs shall be assigned on joining. Job Profile mentioned above are illustrative. Role/Jobs in addition to the above mentioned may be assigned by the Bank from time to time for the above posts.

Important Points:

i) The educational qualification prescribed for the post is minimum. Candidate must possess the qualification and relevant full-time experience as on specified dates.

ii) For Fee exempted candidates, Caste certificate issued by Competent Authority on format prescribed by the Government of India will have to be submitted by the SC/ST/ PwBD candidates.

iii) The relevant experience certificate from employer must contain specifically that the candidate had experience in that related field as required.

iv) Bank reserves the right to cancel the recruitment process entirely or for any particular post at any stage without specifying any reasons thereof.

v) Candidates against whom there is/ are adverse report regarding character & antecedents, moral turpitude are not eligible to apply for the post. If any such adverse orders / reports against the shortlisted/ selected candidates is found/ received by the Bank post their selection/ engagement, their candidature/ service will to be rejected forthwith.

vi) In case more than one application (multiple applications) are submitted by a candidate for the post, only the last valid (completed) application will be retained, and the application fee, if any, paid for the other registrations will stand forfeited. Further, multiple attendance/ appearance by a candidate at the time of interview / joining will result in rejection/ cancellation of candidature, summarily.

vii) The Candidates applying for the post should ensure that their admission to all the stages of the recruitment will be purely provisional subject to satisfying the prescribed eligibility conditions. Mere issuance of call letter(s) / e-Admit Card(s) to the candidate will not imply that his/her candidature has been finally accepted for the post. The Bank takes up verification of eligibility conditions with reference to original documents only after the candidate has been shortlisted for the Interview.

viii) Candidates serving in Govt./ Quasi Govt. offices, Public Sector undertakings including Nationalized Banks and Financial Institutions are advised to submit No Objection Certificate from their employer at the time of interview, failing which their candidature may not be considered and travelling expenses, if any, otherwise admissible, will not be paid.

ix) Transfer Policy: The Bank Reserves The Right To Transfer The Services Of Such Officers To Any Of The Offices Of SBI In India Or To Depute To Any Of Its Associates/Subsidiaries OR any other organization depending upon the exigencies of service. Request for posting/transfer to a specific place/office may not be entertained.

x) Merit List: Merit List For Selection Will Be Prepared In Descending Order On The Basis Of Scores Obtained In Interview Only. In Case More Than One Candidate Score The Cut-Off Marks (Common Marks At Cut-Off Point), Such Candidates Will Be Ranked According To Their Age In Descending Order, In The Merit.

xi) Mere Fulfilling Minimum Qualification And Experience Will Not Vest Any Right In Candidate For Being Called For Interview. The shortlisting committee constituted by the bank will decide the shortlisting parameters and thereafter, adequate number of candidates, as decided by the bank will be shortlisted and called for interview. The decision of the bank to call the candidates for the interview shall be final. No correspondence will be entertained in this regard.

Disclaimer (DPDP Act 2023) By applying to this position, you voluntarily provide your free, informed and unconditional consent for the collection and processing of your personal data by the Bank and sharing of such personal data with Data Processors as are required for the engagement process, in accordance with Digital Personal Data Protection Act, 2023 and the Rules made thereunder (collectively, the Act). The Bank has implemented all reasonable security safeguards to prevent breach of personal data in its possession or under its control, and your personal data will be handled with confidentiality and used solely for evaluating and verifying your eligibility, credentials, and candidacy for the advertised position and for certain legitimate uses as are permitted under the Act.

Other Terms And Conditions Of Engagement:

• The engagement of CISO will be subject to satisfactory completion of medical examination as prescribed by the Bank and verification of Testimonials.
• The CISO will not take up any assignment with any other organization during the period of contract with the Bank.
• The engagement shall not be construed as an employment in Bank and the official is not eligible to claim Provident Fund/Bonus/ Gratuity / Pension during the period of Contract or thereafter.
• He/ She will not be eligible for membership of SBI Pension Fund/ Defined Contribution Pension Scheme (New Pension Scheme) and SBI Employees Provident Fund
• The terms and conditions of engagement is in conformity to Policy for engagement of Officers on Contract Basis.

Other Terms And Conditions:

Remuneration : Annual CTC, which is negotiable, will depend upon Experience & Current Emoluments of candidates in the present employment and place of posting. The CTC comprises 90% fixed and 10% variable pay. Annual increment in CTC is subject to satisfactory annual performance. Besides CTC NO other Perks shall be paid.

Annual Increment: The Annual increment proposed from second year onwards can be upto 10% of previous years Annual CTC based upon satisfactory performance, subject to the achievement of performance appraisal score of at least 90% (Minimum score to be eligible for annual increment) with distribution of Annual increment aligned to the Fixed and variable components. (Fixed: variable: 90:10). The performance metrics will align with the KRAs defined for the respective cadres ensuring clear and measurable assessment of the officers contributions.

Variable Pay: The contractual officer shall become eligible for payment of variable pay subject to securing minimum qualifying 90% marks in the performance appraisal of the relevant period. Appraisals will also be complied at half yearly intervals as on 31st March and 30th September. In case the contract ends before the completion of 6 months (from 2nd year onwards), the variable pay will be released on pro-rata basis. Payment shall be subject to deduction of Income Tax from contractual officer as per the extant income tax rules.

A. Leave: The proposed Officer engaged on Contract (OEC) shall be entitled to leave of 30 days during the financial year which will be granted by Bank for genuine and appropriate reasons. For the purpose of computation of leave, intervening Sundays/ Holidays shall not be included. Other terms and conditions of leave may be as applicable to other contractual officers.

B. Notice Period/ Termination Of Contract: The contract can be terminated without assigning any reasons by giving 3 (three) months notice from either side or on payment / surrender of 03(Three) months compensation amount in lieu thereof.

C. Call Letter For Interview: Intimation /call letter for interview will be sent by email or will be uploaded on bank's website. No hard copy will be sent.

D. Selection Process: The selection will be based on Shortlisting and Interview. Thereafter, CTC negotiations will be held.

Shortlisting: Mere fulfilling minimum qualification and experience will not vest any right in candidate for being called for interview. The shortlisting committee constituted by the Bank will decide the shortlisting parameters and thereafter, adequate number of candidates, as decided by the Bank, will be shortlisted for interview. The decision of the Bank to call the candidates for the interview shall be final. No correspondence will be entertained in this regard. The shortlisted candidates will be called for interview.

Interview: Besides Interaction, Interview shall consist of a 10 minute presentation by shortlisted candidates on the relevant job profile/ projects undertaken/ milestones achieved. Interview will carry 100 marks. The qualifying marks in interview will be decided by the Bank. No correspondence will be entertained in this regard.

Merit list: Merit list for selection will be prepared category wise in descending order on the basis of scores obtained in interview only. In case more than one candidate scores the cut-off marks (common marks at cut-off point), such candidates will be ranked according to their age in descending order, in the merit list.

CTC Negotiation: CTC Negotiation will be done with the candidates in the order of Merit one by one. i.e. In case the selected candidate does not agree with the negotiated price, the name of the candidate shall be considered as Voluntary Exit from the recruitment exercise and next candidate in the merit list shall be called for negotiation.

E. How To Apply: Candidates should have valid email ID which should be kept active till the declaration of result. It will help him/her in getting call letter/Interview advice etc. by email.

Guidelines For Filling Online Application

i. Candidates will be required to register themselves online through the link available on SBI website https://sbi.bank.in/web/careers/current-openings and pay the application fee using Internet Banking/ Debit Card/ Credit Card etc.

ii. Candidates should first scan their latest photograph and signature. Online application will not be registered unless candidate uploads his/ her photo and signature as specified on the online registration page (under How to Upload Documents).

iii. Candidates should fill the application carefully. Once application is filled-in completely, candidate should submit the same. In the event of candidate not being able to fill the application in one go, he can save the information already entered. When the information/ application is saved, a provisional registration number and password is generated by the system and displayed on the screen. Candidate should note down the registration number and password. They can re-open the saved application using registration number and password and edit the particulars, if needed. This facility of editing the saved information will be available for three times only. Once the application is filled completely, candidate should submit the same and proceed for online payment of fee.

iv. After registering online, the candidates are advised to take a printout of the system generated online application forms.

v. Candidates seeking Age relaxation are required to submit copies of necessary certificates at the time of joining. No change in category of any candidate is permitted after registration of online application.

Guidelines For Payment Of Fees

i. Application fees and Intimation Charges (Non-refundable) is 750/- (Seven Hundred Fifty only) for General/EWS /OBC candidates and no fees/intimation charges for SC/ ST/ PwBD candidates.

ii. After ensuring correctness of the particulars in the application form, candidates are required to pay the fees through payment gateway integrated with the application. No change/ edit in the application will be allowed thereafter.

iii. Fee payment will have to be made online through payment gateway available thereat. The payment can be made by using Debit Card/ Credit Card/ Internet Banking etc. by providing information as asked on the screen. Transaction charges for online payment, if any, will be borne by the candidates.

iv. On successful completion of the transaction, e-receipt and application form, bearing the date of submission by the candidate, will be generated which should be printed and retained by the candidate.

v. If the online payment of fee is not successfully completed in first instance, please make fresh attempts to make online payment.

vi. A provision is there to reprint the e-Receipt and Application form containing fee details, at later stage.

vii. Application Fee once paid will NOT be refunded on any account NOR can it be adjusted for any other examination or selection in future.