Assistant Vice President - Information Security

Role : Joint AVP / AVP Information SecurityLocation : MumbaiReporting to : Chief Information Security Officer (CISO)About the role : The incumbent will be responsible for managing Governance, Risk, and Compliance (GRC) for Information and Cyber Security, along with Business Continuity Planning (BCP). The role focuses on strengthening security posture, ensuring regulatory compliance, and integrating security across emerging technologies, including AI systems.Key Responsibilities : 1. Regulatory Compliance : - Ensure adherence to all applicable regulatory requirements and circulars issued from time to time.- Monitor and implement changes required to remain compliant with evolving regulations.2. AI Security by Design : - Implement robust security controls across AI/ML models, data pipelines, and platforms from inception.- Define and enforce secure architecture patterns for AI systems, including model training, inference, and deployment.- Identify and mitigate AI-specific risks such as model poisoning, data leakage, adversarial attacks, and misuse.3. Secure AI Lifecycle & DevSecOps : - Embed security into the AI development lifecycle (AI SDLC).- Integrate security controls within CI/CD pipelines for AI workloads.- Collaborate with engineering and data science teams to implement DevSecOps practices.- Automate vulnerability management, security testing, and compliance checks.4. Security Strategy & Architecture : - Develop and execute enterprise-wide AI security strategy aligned with business objectives.- Define policies, standards, and reference architectures for secure AI adoption.- Evaluate and onboard new AI tools and platforms with a security-first approach.5. Security Project Implementation : - Lead implementation of security initiatives, including AI security, monitoring, and risk management tools.- Drive proof-of-concepts and production deployments for new security capabilities.- Collaborate with vendors and internal stakeholders to ensure successful project delivery.6. Security Operations : - Oversee daily cybersecurity operations, including monitoring, threat detection, and incident response.- Ensure timely response to incidents involving AI systems and data platforms.- Continuously enhance operational processes to improve resilience and reduce risk.7. Governance, Risk & Compliance (GRC) : - Establish governance frameworks for secure and responsible use of technology.- Ensure compliance with legal, regulatory, and internal security standards.- Conduct risk assessments and provide assurance for technology-driven initiatives.- Maintain risk registers and ensure timely mitigation of identified gaps.- Perform cyber maturity assessments and calculate capability indices.8. Business Continuity Planning (BCP) : - Maintain and enhance BCP frameworks, policies, and procedures.- Review and update BIA, crisis management plans, and SOPs.- Ensure readiness for audits and compliance requirements related to BCP.9. Audit & Certifications : - Ensure maintenance of relevant ISO certifications for information security and BCP.- Review governance controls and ensure audit preparedness.- Analyze security and IT compliance reports and recommend improvements.10. Leadership & Stakeholder Management : - Act as a trusted advisor to engineering, data science, and leadership teams.- Drive security awareness and promote best practices across the organization.- Mentor teams on emerging security risks, particularly in AI environments.Knowledge & Essential Skills : - Strong expertise in Information Security, Cyber Security, and GRC frameworks.- Experience in AI/ML security and cloud-native security practices.- Hands-on exposure to DevSecOps and security automation tools.- Strong understanding of regulatory compliance and risk management.Certifications : - Mandatory : CISSP.- Additional security certifications preferred.Educational Qualification : - Full-time Graduation in B.E./B.Tech from a reputed institute.Experience : - 10+ years.Preferred Background : - Candidates from BFSI sector, preferably Asset Management Companies, Banking, or NBFCs. (ref:hirist.tech)