Manager/Sr. Manager IT - CISO

Job Description: Chief Information Security Officer (CISO) / ICT Security Governance Lead

Position Overview
The Chief Information Security Officer (CISO) / ICT Security Governance Lead establishes and oversees the enterprise's cybersecurity vision, strategy, governance, and execution. This full-time role, based in Ranjangaon, Pune, reports to the ICT Infrastructure Head in the ICT Department. The CISO leads cybersecurity operations, ICT audits, regulatory compliance, risk management, and security projects to protect information assets.

Key Responsibilities

• Develop and implement a comprehensive information security strategy aligned with organizational goals, ISO/IEC 27001:2022, and ISMS frameworks (32 policies, 28 procedures, 25 frameworks).
• Oversee SOC/SIEM for 24x7 monitoring, threat intelligence (CERT-IN, TCL, CrowdStrike), vulnerability management, and endpoint security with CrowdStrike Falcon XDR.
• Lead Zero Trust adoption, secure network architecture (segmentation, firewalls, VPN/ZTNA), and infrastructure oversight (VMware, SAN, VxRail).
• Manage incident response, IR frameworks, SOAR playbooks, and forensics for threats like ransomware and DDoS.
• Govern IAM/PAM (Windows AD, Azure, Accops), enforce MFA/SSO, and conduct access reviews.
• Perform risk assessments for IT/OT assets, prioritise remediations, implement DPDP privacy controls, and data classification.
• Lead audits (TML, Stellantis), compliance with ISO 27001/DPDP/CERT-In, and prepare evidence packs.
• Drive awareness training, phishing simulations, inductions, and campaigns on MFA/phishing.
• Deliver projects (SOC modernisation, IAM rollout, OT uplift) and monitor datacenter health/backups.

Qualifications and Skills

• Expertise in ISO 27001 governance, SIEM, patch/VAPT management, endpoint security, e-waste.
• IT infrastructure: datacenter, networking (Fortinet/Palo Alto/CheckPoint/Cisco), servers (Dell/IBM/HP), storage (EMC/Dell), VMware.
• OS/Apps: Windows Server, Linux, AD, SAP ECC, M365, backups (Networker/Data Domain).
• Vendor management, budgeting (CapEx/OpEx), monitoring (ManageEngine, Umbrella).
• Strong leadership in strategy, compliance, and continuous improvement.