Chief information security officer

Job Description – Chief Information Security Officer (CISO)
Job Location : Mumbai
Job Scope
The Chief Information Security Officer (CISO) is a senior executive responsible for overseeing and managing the security of an organization's information assets. The CISO develops and implements the organization's information security strategy while ensuring the confidentiality, integrity, and availability of data, systems, and technology infrastructure.
Job Responsibilities
Information Security Strategy & Planning
Develop and implement a comprehensive information security strategy aligned with the organization's business objectives.
Assess security risks and establish security policies, procedures, standards, and guidelines.
Drive continuous improvement of the organization's security posture.
Risk Management
Identify security risks, vulnerabilities, and threats across the organization.
Conduct risk assessments and implement appropriate security controls.
Ensure compliance with applicable regulatory and industry requirements.
Incident Response & Management
Lead the response to information security incidents and cyberattacks.
Coordinate investigation, containment, eradication, and recovery activities.
Implement preventive measures to minimize the likelihood of future incidents.
Security Operations
Oversee day-to-day security operations and security monitoring activities.
Manage security tools, technologies, and processes.
Analyze security events and emerging threats.
Coordinate with internal teams and external service providers to ensure effective security operations.
Security Awareness & Training
Foster a security-conscious culture across the organization.
Develop and conduct security awareness and training programs.
Educate employees on security best practices and emerging cyber threats.
Compliance & Governance
Ensure compliance with applicable information security regulations, standards, and frameworks.
Maintain security documentation and evidence for audits.
Collaborate with internal and external stakeholders to demonstrate compliance.
Datacenter Responsibilities
A datacenter is a centralized facility that houses computer systems and associated infrastructure, including servers, networking equipment, storage systems, and security devices. It provides a secure and controlled environment to support the reliable operation of critical IT infrastructure.
Physical Infrastructure
Ensure datacenter infrastructure is designed and maintained with redundant power supplies, backup generators, cooling systems, fire suppression systems, and physical access controls.
Safeguard IT assets against power failures, environmental hazards, and unauthorized access.
Server & Storage Infrastructure
Oversee server and storage infrastructure supporting enterprise applications, databases, and services.
Ensure optimal performance, availability, and capacity management.
Networking Infrastructure
Manage robust networking infrastructure, including switches, routers, and firewalls.
Ensure secure, high-speed, and reliable connectivity across internal and external networks.
Security Measures
Implement layered security controls, including:
Physical security (CCTV surveillance, biometric access controls, security personnel).
Logical security (firewalls, intrusion detection/prevention systems, encryption, endpoint protection).
Redundancy & High Availability
Ensure datacenter resilience through redundant power, network connectivity, backup systems, and failover mechanisms.
Minimize downtime and maximize business continuity.
Datacenter Management
Monitor datacenter performance and resource utilization.
Perform capacity planning, system provisioning, hardware maintenance, and infrastructure monitoring.
Ensure efficient and reliable datacenter operations.
Overall, the datacenter serves as the backbone of the organization's IT infrastructure by providing the necessary environment, resources, and security controls to support critical business operations while ensuring the availability, confidentiality, and integrity of data and services.
Compliance & Organizational Responsibilities
Follow and comply with Yotta's management system policies, including QMS, EMS, OHS, ISMS, PIMS, ITSM, and other applicable policies.
Complete all mandatory training programs communicated from time to time.
Participate in risk assessment activities.
Contribute toward achieving departmental and management system objectives.
Assist in maintaining Privacy Information Management System (PIMS) controls throughout the personal data lifecycle.
Good-to-Have Skills
Strong leadership, mentoring, and technical solution development capabilities.
Good working knowledge of Auto CAD software.
Ability to understand Civil, Electrical, HVAC, and Fire Fighting drawings in Auto CAD.
Ability to understand and execute reliability engineering requirements.
Strong coordination skills with operations and cross-functional teams.
Excellent documentation, record-keeping, written communication, and verbal communication skills.
Behavioral Competencies
Strategic Vision & Purpose
Effective Communication & Skillful Conversation
Innovative Mindset
Risk Management
Leading Change with Composure
Learning Agility
Customer Focus
Analytical Thinking
Drive for Results & Ownership
Planning, Prioritization & Organization
Active Listening
Team Building
Collaboration & Relationship Management
Qualifications & Experience
Education :
Bachelor's degree in Engineering, Computer Science, Information Systems, or a related discipline.
Master's degree or MBA is preferred.
Experience
20+ years of progressive experience in Information Security, Cybersecurity, Risk Management, or IT Infrastructure.
Preferred Certifications
CISM (Certified Information Security Manager)
CISA (Certified Information Systems Auditor)