Head – CISO

Role Overview

The Head CISO will be responsible for defining, implementing, and overseeing the information security, cybersecurity, and technology risk management strategy of the company. This role ensures compliance with SEBI, NSE, BSE, CDSL/NSDL, CERT-In, and other applicable regulatory requirements, while safeguarding customer data, trading platforms, and critical market infrastructure

Key Responsibilities

• Own and implement the Information Security & Cyber Risk Management framework for the organization.
• Ensure ongoing compliance with SEBI, NSE/BSE, CDSL/NSDL cybersecurity requirements and regulatory circulars.
• Manage regulatory audits, inspections, VAPT, and cyber resilience drills.
• Oversee security of trading platforms, applications, APIs, cloud and on-prem infrastructure.
• Lead cyber incident response, regulatory reporting, and stakeholder communication.
• Drive BCP/DR security controls and cyber resilience readiness.
• Ensure protection of client data and systems in line with IT Act, DPDP Act 2023, and internal policies.
• Manage third-party and vendor security risk assessments.
• Build and lead the Information Security team and drive organization-wide security awareness.

Experience & Qualifications

• 15+ years in Information Security / Cybersecurity
• 5+ years in a leadership role (CISO / Deputy CISO / Head of Security)
• Mandatory experience in SEBI-regulated entities (Broking, Exchange, Bank, NBFC, Fintech)
• Strong exposure to capital markets technology and regulatory audits
• Experience of managing Data Protection portfolio

Preferred Certifications: CISSP, CISM, CISA, ISO 27001

Key Competencies

• SEBI cybersecurity compliance & inspection readiness
• Cyber risk, governance, and incident management
• Strong stakeholder and regulator interaction skills
• Ability to balance security, availability, and business agility