Chief information security officer

Job Opening: Chief Information Security Officer (CISO) Location: Thane Employment Type: Full-Time | Senior Leadership Department: Security & Compliance About Our Client Our client is a global leader in AI/ML-powered Customer Engagement and Experience Platforms (CEE). They are dedicated to revolutionizing how B2 C brands interact with their customers through state-of-the-art Saa S products that drive personalized engagement across the entire customer journey. Trusted by 5,000+ enterprise brands in 18 countries (including over 70% of India’s unicorns), our client combines global influence with a local touch. Engineering at Our Client At our client, engineers directly shape engagement, conversions, revenue, and customer retention. The team thrives on solving complex challenges of scaling high-performance systems, leveraging cutting-edge technologies such as Kafka, Storm, Rabbit MQ, Celery, Redis Q, Go Lang, all deployed on AWS and GCP. Here, you’re not just solving problems—you’re setting industry benchmarks. Culture & Recognition Our client has been recognized as a Great Place to Work for three consecutive years. They foster a people-centric culture where collaboration, curiosity, and innovation are celebrated. Every employee’s voice matters, making you feel like part of a family rather than just an employee. Global Presence Headquarters: Mumbai Presence: 10 countries including the US and Germany Clients: 5,000+ enterprise brands worldwide Why Join Our Client? Work on cutting-edge AI/ML-powered Saa S products Impact millions of end-users across industries Be part of a fast-paced, innovative, and collaborative team Growth-oriented environment with recognition and support About the Role We’re looking for an experienced and visionary Chief Information Security Officer (CISO) to lead our company-wide information security strategy. As a key member of the senior leadership team, you’ll be responsible for protecting our systems, data, and applications while aligning security initiatives with our business goals. This role requires a strong leader with deep technical expertise, a strategic mindset, and a passion for building secure, scalable, and compliant environments—especially within fast-paced, Saa S or technology-driven companies. Key Responsibilities Strategic Leadership Define and drive the overall information security vision, strategy, and roadmap. Provide executive-level guidance on risk management, compliance, and emerging threats. Embed security best practices into business operations through cross-functional collaboration. Risk & Security Program Management Develop and enforce comprehensive security policies, standards, and procedures. Lead enterprise-wide risk assessments, threat modeling, and vulnerability analysis. Monitor and respond to security threats, alerts, and reports in real time. Incident Response & Recovery Lead the development and execution of incident response strategies and playbooks. Oversee security investigations and coordinate cross-functional remediation efforts. Act as point-of-contact for stakeholders and regulators during security events. Compliance & Audit Ensure compliance with frameworks and regulations like ISO 27001, GDPR, SOC 2, etc. Support internal and external audits, and drive closure of any findings. Maintain comprehensive documentation of security policies and incident history. Security Awareness & Culture Promote a culture of security through ongoing training and awareness programs. Collaborate with department leaders to ensure security is part of everyday practices. Technical Leadership Oversee the implementation and management of tools like SIEM, IDS/IPS, firewalls, and encryption. Conduct regular penetration testing and vulnerability assessments. Stay ahead of industry trends and technologies to continually improve defenses. Application Security Oversight Partner with engineering teams to integrate security into the SDLC. Lead secure code reviews, vulnerability assessments, and application threat modeling. Define and enforce secure coding standards; train teams on App Sec best practices. What We’re Looking For Education & Certifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field. Advanced certifications preferred: CISSP, CISM, OSCP, CEH, or equivalent. Experience 12+ years in information security, with leadership in enterprise environments. Strong background in Saa S or technology-led companies. Proven ability to align security programs with business strategy. Skills & Competencies Deep knowledge of security frameworks (NIST, ISO 27001) and compliance standards (GDPR, SOC 2). Expertise in cloud security (AWS, GCP, or Azure). Strong communication and leadership skills to influence at all levels. Hands-on experience with security tools (SAST, DAST, SIEM, IDS/IPS, encryption). Analytical and data-driven approach to problem-solving.