Job Description – Chief Information Security Officer (CISO)
Job Location : Mumbai
Job Scope
The Chief Information Security Officer (CISO) is a senior executive responsible for overseeing and managing the security of an organization's information assets. The CISO develops and implements the organization's information security strategy while ensuring the confidentiality, integrity, and availability of data, systems, and technology infrastructure.
Job Responsibilities
Information Security Strategy & Planning
- Develop and implement a comprehensive information security strategy aligned with the organization's business objectives.
- Assess security risks and establish security policies, procedures, standards, and guidelines.
- Drive continuous improvement of the organization's security posture.
Risk Management
- Identify security risks, vulnerabilities, and threats across the organization.
- Conduct risk assessments and implement appropriate security controls.
- Ensure compliance with applicable regulatory and industry requirements.
Incident Response & Management
- Lead the response to information security incidents and cyberattacks.
- Coordinate investigation, containment, eradication, and recovery activities.
- Implement preventive measures to minimize the likelihood of future incidents.
Security Operations
- Oversee day-to-day security operations and security monitoring activities.
- Manage security tools, technologies, and processes.
- Analyze security events and emerging threats.
- Coordinate with internal teams and external service providers to ensure effective security operations.
Security Awareness & Training
- Foster a security-conscious culture across the organization.
- Develop and conduct security awareness and training programs.
- Educate employees on security best practices and emerging cyber threats.
Compliance & Governance
- Ensure compliance with applicable information security regulations, standards, and frameworks.
- Maintain security documentation and evidence for audits.
- Collaborate with internal and external stakeholders to demonstrate compliance.
Datacenter Responsibilities
A datacenter is a centralized facility that houses computer systems and associated infrastructure, including servers, networking equipment, storage systems, and security devices. It provides a secure and controlled environment to support the reliable operation of critical IT infrastructure.
Physical Infrastructure
- Ensure datacenter infrastructure is designed and maintained with redundant power supplies, backup generators, cooling systems, fire suppression systems, and physical access controls.
- Safeguard IT assets against power failures, environmental hazards, and unauthorized access.
Server & Storage Infrastructure
- Oversee server and storage infrastructure supporting enterprise applications, databases, and services.
- Ensure optimal performance, availability, and capacity management.
Networking Infrastructure
- Manage robust networking infrastructure, including switches, routers, and firewalls.
- Ensure secure, high-speed, and reliable connectivity across internal and external networks.
Security Measures
- Implement layered security controls, including:
- Physical security (CCTV surveillance, biometric access controls, security personnel).
- Logical security (firewalls, intrusion detection/prevention systems, encryption, endpoint protection).
Redundancy & High Availability
- Ensure datacenter resilience through redundant power, network connectivity, backup systems, and failover mechanisms.
- Minimize downtime and maximize business continuity.
Datacenter Management
- Monitor datacenter performance and resource utilization.
- Perform capacity planning, system provisioning, hardware maintenance, and infrastructure monitoring.
- Ensure efficient and reliable datacenter operations.
Overall, the datacenter serves as the backbone of the organization's IT infrastructure by providing the necessary environment, resources, and security controls to support critical business operations while ensuring the availability, confidentiality, and integrity of data and services.
Compliance & Organizational Responsibilities
- Follow and comply with Yotta's management system policies, including QMS, EMS, OHS, ISMS, PIMS, ITSM, and other applicable policies.
- Complete all mandatory training programs communicated from time to time.
- Participate in risk assessment activities.
- Contribute toward achieving departmental and management system objectives.
- Assist in maintaining Privacy Information Management System (PIMS) controls throughout the personal data lifecycle.
Good-to-Have Skills
- Strong leadership, mentoring, and technical solution development capabilities.
- Good working knowledge of AutoCAD software.
- Ability to understand Civil, Electrical, HVAC, and Fire Fighting drawings in AutoCAD.
- Ability to understand and execute reliability engineering requirements.
- Strong coordination skills with operations and cross-functional teams.
- Excellent documentation, record-keeping, written communication, and verbal communication skills.
Behavioral Competencies
- Strategic Vision & Purpose
- Effective Communication & Skillful Conversation
- Innovative Mindset
- Risk Management
- Leading Change with Composure
- Learning Agility
- Customer Focus
- Analytical Thinking
- Drive for Results & Ownership
- Planning, Prioritization & Organization
- Active Listening
- Team Building
- Collaboration & Relationship Management
Qualifications & Experience
Education :
- Bachelor's degree in Engineering, Computer Science, Information Systems, or a related discipline.
- Master's degree or MBA is preferred.
Experience
- 20+ years of progressive experience in Information Security, Cybersecurity, Risk Management, or IT Infrastructure.
Preferred Certifications
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)