Chief Information Security Officer

4 days ago

mumbai, India Goldman Sachs Full time

Regulatory Responsibilities -  CISO:

The CISO will be required to interact with regulators on all information security matters relating to the Company and shall assume all responsibilities as per applicable regulations, including:

Driving cyber security strategy and ensuring compliance to the extant regulatory / statutory instructions on information/ cyber security. Enforcing the policies that the Company uses to protect its information assets apart from coordinating information/ cyber security related issues within the company as well as with relevant external agencies. The CISO will be a member of the Information Security Committee which will be responsible for development and implementation of information/cyber security policies, approving and monitoring information security projects/awareness initiatives and reviewing cyber incidents, information systems audit observations, monitoring and mitigation activities. The CISO will also be a permanent invitee to the IT Strategy Committee and IT Steering Committee, and contribute to the working of these committees as required.  Manage and monitor Security Operations Centre and drive cyber security related projects. Ensure effective functioning of the security solutions deployed.

The CISO shall place a review of cyber security risks/ arrangements/ preparedness of the Company before the Board/ Risk Management Committee/IT Strategy Committee at least on a quarterly basis.

MORE ABOUT THIS JOB

The Technology Risk Officer will be responsible for representing, managing and communicating technology risk for the Global Markets Division. This requires representing firmwide control requirements and specific control requirements related to this division. The Technology Risk Officer will be primarily focused on security controls in business applications/processes that support the Global Markets Division business lines (FICC, Equities, Marquee, etc). The successful candidate will be a trusted risk adviser to high performance application and platform teams across the division.

RESPONSIBILITIES AND QUALIFICATIONS

HOW YOU WILL FULFILL YOUR POTENTIAL

Interact with Global Markets engineering stakeholders to understand and communicate risks to critical infrastructure and systems, defining potential business impact, and tracking commitments to apply effective mitigating controls. Drive adoption of application security, technology privacy, privilege management and vulnerability management controls as part of the Software Development Life Cycle (SDLC) and production management (DevOps) processes. Track the progress of remediation of control gaps identified by firmwide control programs, application security and vulnerability testing, Internal Audit, self-testing, or controls self-assessment. Assist in the execution of the access and entitlements recertification, and the SOX404 and operational risk control self-assessments by evaluating the key risks and assessing mitigating controls and evidence to determine the risk profile for the organization. Assist in the development and monitoring of key risk indicators (KRIs) that are mapped to various risks and controls to determine control gaps, and advise application development teams on implementing risk mitigation measures. Communicate the impact of technology risks and the approach to mitigation/acceptance, and provide risk assessment and advisory services to technology engineers, and technology and business management. Work with internal application development teams that are developing the next generation of critical business applications, help them understand Information Security, Cyber Security and Business Resiliency control requirements, and advise on the integration of these controls into their applications. Collaborate with the global Technology Risk Governance, Application Risk, Vulnerability Management, Privilege Management, Risk Measurement, and other global Technology Risk teams to develop and integrate best-in-class security and resiliency controls and practices. Contribute to the technical understanding, adoption and convergence of information security standards, solutions and tools.

SKILLS AND EXPERIENCE WE ARE LOOKING FOR

Experience of managing / delivering IT Risk advice and improvement projects in FSI with experience of leading teams Experience of managing diverse business and IT stakeholders at all levels of seniority, including CIO, CRO, CTO, CFO and CISO Ability to identify and assess complex IT risks and controls, to relate them to the wider business environment and to express opinions clearly to all levels Strong understanding of FS sector – business processes / products / keys risks A good understanding of technology platforms Good knowledge of different operating systems, databases, networking, security concepts and technologies from an IT risk and controls perspective A proven ability to manage and monitor program timelines, deliverables, budgets and financial performance Ability to spot opportunities to add value and work with colleagues in other lines of business to help find solutions to the challenges they face Ability to work flexibly in terms of working hours to accommodate tight timelines and manage well under pressure Bachelor’s degree in Computer Science, Computer Engineering, or a related field. 5+ years experience driving controls adoption based on information security policies, procedures or standards. 3 years experience performing technology risk or vulnerability assessments aimed at independently assessing security weaknesses and gaps.


Preferred Qualifications

Experience interfacing with and communicating complex technical security concepts to non-technical audiences. Information security policy, standards, guidelines or procedures development and implementation. Infrastructure, database and/or application security experience. Privilege management (. access and identity management, access re-certification) experience. Control self-assessment, SOX404 technical control assessment, SOC 1/SOC 2 control assessment experience. Strong knowledge of control frameworks and the ability to design and evaluate effectiveness of controls embedded within business processes. Ability to work with large data sets, reporting dashboards and excel worksheets. Industry accepted security certifications including CISSP or CISM or CRISC or equivalent SANS certification. ABOUT GOLDMAN SACHS At Goldman Sachs, we commit our people, capital and ideas to help our clients, shareholders and the communities we serve to grow. Founded in 1869, we are a leading global investment banking, securities and investment management firm. Headquartered in New York, we maintain offices around the world. We believe who you are makes you better at what you do. We're committed to fostering and advancing diversity and inclusion in our own workplace and beyond by ensuring every individual within our firm has a number of opportunities to grow professionally and personally, from our training and development opportunities and firmwide networks to benefits, wellness and personal finance offerings and mindfulness programs. Learn more about our culture, benefits, and people at /careers. We’re committed to finding reasonable accommodations for candidates with special needs or disabilities during our recruiting process.

  • Chief Information Security Officer

    3 weeks ago

    Mumbai, India Metropolitan Stock Exchange of India Full time

    **Role**: **Chief Information Security Officer** **Location**: Mumbai **Qualification Profile**: - Diploma in Computers, IT, or Electronics or Graduate/Post Graduate/B.Sc. -IT; Certifications: ISO 27001 Lead auditor / Lead Implementer, ITIL, CISA, CISSP**Experience**: 15+ Years **Responsibilities**: Chief Information Security Officer: Detailed Job...

  • Chief Information Officer

    2 weeks ago

    Mumbai, Maharashtra, India Authentic Staffing Agency - INDIA, USA, UAE Full time

    We're hiring aChief Information Officer (CIO)to oversee applications & solutions, big data, reporting, network & infrastructure, data centers, and Information Security across diverse business segments.Position:Chief Information Officer (CIO)Mumbai, IndiaExperience: 20+ YearsLooking forManage ApplicationsData Centers ManagementNetwork & Infrastructure...

  • Chief Information Security Officer

    1 month ago

    mumbai, India Ring Full time

    Ring is a “Made in India” online Instant Credit Platform operated by OnEMi Technology Solutions Pvt Ltd with an aim to provide their coveted “PaywithRing Limit” product to their customers across India.Ring is conceptualized to provide instant credit facility to its customers. It also allows the customer to walk in at any merchant store which accepts...

  • Chief Information Security Officer

    2 weeks ago

    Mumbai, Maharashtra, India Ring Full time

    Ring is a "Made in India" online Instant Credit Platform operated by OnEMi Technology Solutions Pvt Ltd with an aim to provide their coveted "PaywithRing Limit" product to their customers across India.Ring is conceptualized to provide instant credit facility to its customers. It also allows the customer to walk in at any merchant store which accepts payments...

  • Chief Information Security Officer

    4 weeks ago

    Mumbai, India Citizencredit Co-op Bank Full time

    CITIZENCREDIT Centre, CTS No. 236, Marve Road, Orlem, Malad West, Mumbai 400064 **Chief Information Security Officer (CISO)** With proven experience as a CISO or similar leadership role of minimum 5 years experience in the BFSI sector. Who can lead and oversee our Bank’s information security program. This includes developing and implementing security...

  • Chief Information Security Officer

    1 month ago

    Mumbai, India Ring Full time

    Ring is a “Made in India” online Instant Credit Platform operated by OnEMi Technology Solutions Pvt Ltd with an aim to provide their coveted “PaywithRing Limit” product to their customers across India.Ring is conceptualized to provide instant credit facility to its customers. It also allows the customer to walk in at any merchant store which accepts...

  • Chief Information Security Officer

    1 month ago

    Mumbai, India Ring Full time

    Ring is a “Made in India” online Instant Credit Platform operated by OnEMi Technology Solutions Pvt Ltd with an aim to provide their coveted “PaywithRing Limit” product to their customers across India. Ring is conceptualized to provide instant credit facility to its customers. It also allows the customer to walk in at any merchant store which accepts...

  • Chief Information Security Officer

    2 weeks ago

    Mumbai, Maharashtra, India Ring Full time

    Ring is a "Made in India" online Instant Credit Platform operated by OnEMi Technology Solutions Pvt Ltd with an aim to provide their coveted "PaywithRing Limit" product to their customers across India.Ring is conceptualized to provide instant credit facility to its customers. It also allows the customer to walk in at any merchant store which accepts payments...

  • Chief Information Officer

    2 weeks ago

    Mumbai, India Authentic Staffing Agency - INDIA, USA, UAE Full time

    We're hiring aChief Information Officer (CIO)to oversee applications & solutions, big data, reporting, network & infrastructure, data centers, and Information Security across diverse business segments.Position:Chief Information Officer (CIO)Mumbai, IndiaExperience: 20+ YearsLooking forManage ApplicationsData Centers ManagementNetwork & Infrastructure...

  • Chief Information Security Officer

    3 weeks ago

    Navi Mumbai, India Saavn Full time

    **JOB TITLE: CHIEF INFORMATION SECURITY OFFICER** **LOCATION: NAVI MUMBAI, INDIA (GHANSOLI)** **OUR STORY**: JioSaavn is India’s leading audio streaming service to access, discover, and listen to favourite songs & Podcasts across languages and genres. We blend digital technology, data analysis (which we have affectionately coined Music Science), and a...

  • Chief Information Officer

    2 weeks ago

    mumbai, India Authentic Staffing Agency - INDIA, USA, UAE Full time

    We're hiring a Chief Information Officer (CIO) to oversee applications & solutions, big data, reporting, network & infrastructure, data centers, and Information Security across diverse business segments.Position: Chief Information Officer (CIO)Mumbai, IndiaExperience: 20+ YearsLooking forManage ApplicationsData Centers ManagementNetwork & Infrastructure...

  • Chief Information Officer

    2 weeks ago

    Mumbai, India Authentic Staffing Agency - INDIA, USA, UAE Full time

    We're hiring a Chief Information Officer (CIO) to oversee applications & solutions, big data, reporting, network & infrastructure, data centers, and Information Security across diverse business segments.Position: Chief Information Officer (CIO) Mumbai, IndiaExperience: 20+ YearsLooking forManage ApplicationsData Centers ManagementNetwork & Infrastructure...

  • Chief Information Officer

    2 weeks ago

    Mumbai, India Authentic Staffing Agency - INDIA, USA, UAE Full time

    We're hiring a Chief Information Officer (CIO) to oversee applications & solutions, big data, reporting, network & infrastructure, data centers, and Information Security across diverse business segments. Position: Chief Information Officer (CIO) Mumbai, India Experience: 20+ Years Looking for Manage Applications Data Centers Management Network &...

  • Ciso Chief Information Security Officer Bfsi 15

    2 months ago

    Sakinaka, Mumbai, Maharashtra, India TheHiringbee Full time

    Designation: CISO ( **chief information security officer**) Min experience - 15 to 20 years. - Worked in BFSI as a CISO or reporting to a CISO - Well versed with RBI, SEBI guidelines ect - Knowledge of SOC, NOC - Handled compliance and risk team. **Responsibilities**: - Develop, implement and monitor a strategic, comprehensive enterprise information...

  • Ciso Chief Information Security Officer Bfsi 150

    2 months ago

    Ghatkopar, Mumbai, Maharashtra, India TheHiringbee Full time

    Designation: CISO ( **chief information security officer**) Min experience - 10 to 15 years. - Worked in BFSI as a CISO or reporting to a CISO - Well versed with RBI, SEBI guidelines ect - Knowledge of SOC, NOC - Handled compliance and risk team. **Responsibilities**: - Develop, implement and monitor a strategic, comprehensive enterprise information...

  • Ciso Chief Information Security Officer Bfsi 15

    1 day ago

    Sakinaka, Mumbai, Maharashtra, India TheHiringbee Full time

    Designation: CISO ( **chief information security officer**) Min experience - 15 to 20 years. - Worked in BFSI as a CISO or reporting to a CISO - Well versed with RBI, SEBI guidelines ect - Knowledge of SOC, NOC - Handled compliance and risk team. **Responsibilities**: - Develop, implement and monitor a strategic, comprehensive enterprise information...

  • Chief Information Security Officer

    2 months ago

    Mumbai, India Morpheus Human Consulting Full time

    Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management programWork directly with the business units to facilitate risk assessment and risk management processesDevelop and enhance an information security management frameworkUnderstand and interact with related disciplines through committees to ensure...

  • Chief Information Security Officer

    3 months ago

    mumbai, India Morpheus Human Consulting Full time

    Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management program Work directly with the business units to facilitate risk assessment and risk management processes Develop and enhance an information security management framework Understand and interact with related disciplines through committees to...

  • Chief Information Officer

    2 weeks ago

    Mumbai, Maharashtra, India Sampoorna Computer People Full time

    Job Summary Experience:YearsLocation:Mumbai Designation:Chief Information Officer (CIO) - FijiDegree:BE-Other, BSc-Comp/IT, BSc-Other, BTech-Comp/IT, BTech-Other, CA, CS, DCA, DCS, DE-Comp/IT, DE-Other, Diploma, MBA, MCA, MCM, ME-Comp/IT, ME-Other, MIS Educational Level:Undergraduate/DiplomaIndustrial Type:IT-Software/Software ServicesFunctional Area:Top...

  • Deputy Chief Information Security Officer sidbi

    2 weeks ago

    Mumbai, Maharashtra, India NISG (National Institute for Smart Government) Full time

    From 12 to 16 year(s) of experience₹ Not Disclosed by Recruiter MumbaiRoles and ResponsibilitiesCertified Information Systems Security Professional (CISSP)- / Certified Information Security Manager (CISM)/ Certified Chief Information Security Officer (CCISO) / Certified Information Systems Auditor (CISA)Scope of Work:The Dy.CISO of the Bank will be...