AVP - Information Security

Job description

Synopsis of the role

Our team in India is seeking an experienced cybersecurity expert to lead the Information Security initiatives, serving as the official RBI-designated authority. Reporting directly to the Regional CISO with reporting access to the Board and Managing Director of India ECIS, you will manage compliance filings alongside regulatory reviews. Operating without direct reports or sales quotas, this position delivers targeted executive governance and regulatory exposure for a seasoned specialist.

What you’ll do Serve as the RBI-designated Head of Information Security (CISO Designate) for India ECIS, acting as the single point of accountability in regulatory examinations and audits. Meet all regulatory reporting obligations under the RBI's information security framework, including incident notification within mandated timeframes. Coordinate with the matrixed India security team, reporting to the International CISO for Europe, India and the Emerging Markets, on control execution.

Lead the entity's response to security incidents, ensuring timely escalation, remediation, and regulator communication. Liaise with internal and external auditors, examiners, and assessors on information security posture and evidence. What experience you need Willing to work from our Mumbai office, at least 4 days a week. Bachelor's degree in a relevant technical or security field; a recognized security certification (e.g., CISSP, CISM) preferred. 15+ years of progressive information security experience, including prior experience in a security leadership or management role.

Experience in a regulated industry or organisation, ideally as a designated or accountable security officer before a financial services regulator (RBI, SEBI, or equivalent). Tracking record of managing security incidents through to regulatory closure. Experience presenting to boards, audit committees, or senior leadership. Familiarity with India's data protection and financial-sector regulatory landscape (RBI circulars, CIC-specific rules).

Experience working in an international or national matrixed team, influencing people not in your direct reporting line. What could set you apart Experience as a designated lead for a regulator, ideally as a InfoSec Lead for a Credit Information Company or NBFC. Experience using DAKSH or similar RBI incident-reporting portals. Exposure to global or regional security frameworks in a multinational matrix structure. Familiarity with Credit Reference Agencies or a comparable global credit bureau's security operating model.

Board-level communication skills, including experience drafting board papers on security posture. Existing relationships with RBI examination teams or Indian financial regulators. Experience partnering closely with a InfoSec Leaders or global security function in a shared-services model. #India