Overview

Role - Chief Information Security Officer (CISO)

Responsibilities

• Define and execute Celebal's information security strategy, policies, standards, and risk management framework.
• Establish enterprise-wide security governance and cyber risk management practices.
• Identify, assess, and mitigate cybersecurity risks across infrastructure, cloud environments, applications, and business operations.
• Present security risks, compliance status, and remediation plans to executive leadership.
• Own and maintain compliance with ISO 27001, SOC 2, GDPR, India DPDP Act, and client-specific security requirements.
• Lead internal, external, and customer security audits and drive timely remediation of findings.
• Manage third-party and vendor security risk assessments.
• Ensure adherence to contractual security and data protection obligations.
• Oversee security architecture and controls across cloud, network, endpoint, identity, and data environments.
• Drive security best practices across Microsoft Azure environments, including Defender, Sentinel, Entra ID, and Purview.
• Lead vulnerability management, threat monitoring, incident response, and cyber resilience initiatives.
• Oversee business continuity and disaster recovery preparedness.
• Collaborate with Delivery POD leaders to embed cybersecurity, privacy, and data governance best practices into project delivery, ensuring secure, compliant, and efficient execution of client engagements.
• Promote secure development, access management, data protection, and cloud security standards across delivery teams.
• Support project teams in identifying and mitigating security risks throughout the delivery lifecycle.
• Build and nurture a security-first culture across the organization through continuous training, awareness programs, cyber drills, and the promotion of cybersecurity and data protection best practices.
• Conduct employee security awareness initiatives, phishing simulations, and policy education programs.
• Drive accountability for responsible data handling and compliance across all functions.
• Lead enterprise data privacy and protection initiatives.
• Establish governance practices for AI, GenAI, and emerging technology platforms.
• Monitor evolving regulatory and cybersecurity requirements and ensure organizational readiness.

Qualifications

• 15+ years of experience in information security, cybersecurity, risk management, or related fields.
• Minimum 5 years in a senior security leadership role such as CISO, Deputy CISO, Head of Security, or equivalent.
• Strong experience in security governance, risk management, compliance, and audit programs.
• Hands-on understanding of cloud security, preferably Microsoft Azure.
• Deep knowledge of ISO 27001, SOC 2, NIST CSF, GDPR, India DPDP Act, and industry security best practices.
• Excellent communication and stakeholder management skills.
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CCSP (Certified Cloud Security Professional)
• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• ISO 27001 Lead Auditor / Lead Implementer
• Microsoft Cybersecurity Architect Expert (SC-100)
• Strong and measurable improvement in Celebal's security posture and cyber resilience.
• Successful maintenance and enhancement of key compliance certifications and audit outcomes.
• Security and data governance embedded into day-to-day operations and project delivery.
• Increased employee awareness and adoption of cybersecurity best practices.
• A scalable security framework that supports Celebal's global growth and AI-driven future.