Chief Information Security Officer

Job Opening: Chief Information Security Officer (CISO)Location: ThaneEmployment Type: Full-Time | Senior LeadershipDepartment: Security & ComplianceAbout Our ClientOur client is a global leader in AI/ML-powered Customer Engagement and Experience Platforms (CEE). They are dedicated to revolutionizing how B2C brands interact with their customers through state-of-the-art SaaS products that drive personalized engagement across the entire customer journey. Trusted by 5,000+ enterprise brands in 18 countries (including over 70% of India’s unicorns), our client combines global influence with a local touch.Engineering at Our ClientAt our client, engineers directly shape engagement, conversions, revenue, and customer retention. The team thrives on solving complex challenges of scaling high-performance systems, leveraging cutting-edge technologies such as Kafka, Storm, RabbitMQ, Celery, RedisQ, GoLang , all deployed on AWS and GCP . Here, you’re not just solving problems—you’re setting industry benchmarks.Culture & RecognitionOur client has been recognized as a Great Place to Work for three consecutive years. They foster a people-centric culture where collaboration, curiosity, and innovation are celebrated. Every employee’s voice matters, making you feel like part of a family rather than just an employee.Global PresenceHeadquarters: MumbaiPresence: 10 countries including the US and GermanyClients: 5,000+ enterprise brands worldwideWhy Join Our Client?Work on cutting-edge AI/ML-powered SaaS productsImpact millions of end-users across industriesBe part of a fast-paced, innovative, and collaborative teamGrowth-oriented environment with recognition and supportAbout the RoleWe’re looking for an experienced and visionary Chief Information Security Officer (CISO) to lead our company-wide information security strategy. As a key member of the senior leadership team, you’ll be responsible for protecting our systems, data, and applications while aligning security initiatives with our business goals.This role requires a strong leader with deep technical expertise, a strategic mindset, and a passion for building secure, scalable, and compliant environments—especially within fast-paced, SaaS or technology-driven companies.Key ResponsibilitiesStrategic LeadershipDefine and drive the overall information security vision, strategy, and roadmap.Provide executive-level guidance on risk management, compliance, and emerging threats.Embed security best practices into business operations through cross-functional collaboration.️ Risk & Security Program ManagementDevelop and enforce comprehensive security policies, standards, and procedures.Lead enterprise-wide risk assessments, threat modeling, and vulnerability analysis.Monitor and respond to security threats, alerts, and reports in real time.Incident Response & RecoveryLead the development and execution of incident response strategies and playbooks.Oversee security investigations and coordinate cross-functional remediation efforts.Act as point-of-contact for stakeholders and regulators during security events.✅ Compliance & AuditEnsure compliance with frameworks and regulations like ISO 27001, GDPR, SOC 2, etc.Support internal and external audits, and drive closure of any findings.Maintain comprehensive documentation of security policies and incident history.Security Awareness & CulturePromote a culture of security through ongoing training and awareness programs.Collaborate with department leaders to ensure security is part of everyday practices.Technical LeadershipOversee the implementation and management of tools like SIEM, IDS/IPS, firewalls, and encryption.Conduct regular penetration testing and vulnerability assessments.Stay ahead of industry trends and technologies to continually improve defenses.Application Security OversightPartner with engineering teams to integrate security into the SDLC.Lead secure code reviews, vulnerability assessments, and application threat modeling.Define and enforce secure coding standards; train teams on AppSec best practices.What We’re Looking ForEducation & CertificationsBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.Advanced certifications preferred: CISSP, CISM, OSCP, CEH, or equivalent.Experience12+ years in information security, with leadership in enterprise environments.Strong background in SaaS or technology-led companies.Proven ability to align security programs with business strategy.Skills & CompetenciesDeep knowledge of security frameworks (NIST, ISO 27001) and compliance standards (GDPR, SOC 2).Expertise in cloud security (AWS, GCP, or Azure).Strong communication and leadership skills to influence at all levels.Hands-on experience with security tools (SAST, DAST, SIEM, IDS/IPS, encryption).Analytical and data-driven approach to problem-solving.