HDFC - Chief Information Security Officer

Role & responsibilities :- Leading the development and implementation of the Company's information security strategy.- Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.- Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.- Identifying and mitigating security risks, ensuring the organization remains resilient against emerging threats.- Ensuring the Company's compliance with industry standards and regulations.- Managing security audits, compliance assessments, incident response processes, and investigating security breaches.- Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.- Develop, implement, and maintain a comprehensive security program that includes cyber defense, data protection, and security operations.- Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.- Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.- Manage the security architecture, tools, and technologies deployed across the organization's IT infrastructure.- Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection laws, such as IRDA Cyber Laws, RBI, CERT-IN, Meity, DDPA.- Monitor security metrics and report on the organization's security posture to executive leadership.- Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization.- Stay updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.Preferred candidate profile :- Bachelors degree in Information Security, Computer Science, or a related field.- 6+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.- Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001, DDPA), and risk management practices.- Working knowledge of security auditing, vulnerability assessments, and risk mitigation.- Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, DLP, and encryption protocols.- Solid knowledge of data privacy regulations and compliance requirements.- Ability to develop and implement complex security strategies.- Strong leadership and communication skills, with the ability to influence decision-making at the executive level.- Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.- Ability to manage a team of security professionals and work cross-functionally with IT, legal, and compliance teams.- Experience with cloud security and securing cloud infrastructure & SAAS platforms.- Familiarity with incident management and disaster recovery planning.- Knowledge of ethical hacking and penetration testing techniques.- Background in regulatory compliance and data privacy laws in the industry.- Hands-on experience with SIEM tools, firewalls, DLP and intrusion detection systems.- Expertise in secure software development and Dev Sec Ops practices.- Understanding of artificial intelligence and machine learning applications in security. (ref:hirist.tech)