Vice President - IT Security

Engagement with GSTN would be on tenure basis. The tenure would be of 4 Years. GSTN allow multiple tenure based on the performance.

Role : Vice President IT Security

Reporting to : SVP - CISO

Function : Technology

Level : 3

Grade : 3b

Experience : 14 - 16 Years

Role Overview:

The Vice President of IT Security will oversee the organization's cybersecurity strategy, ensuring the protection of digital assets, information systems, and infrastructure. As a key leader within the Information Security team, the VP will be instrumental in designing, implementing, and managing security policies, frameworks, and initiatives aligned with the organizations business objectives and regulatory requirements. The role demands a strategic thinker and seasoned professional with deep technical knowledge, leadership acumen, and a proven track record in enterprise security management and managing a complex ecosystem of technology partners to maintain overall security posture of GSTN.

Key Responsibilities:

Strategic Leadership

• Assist CISO in developing and implementing a comprehensive IT security strategy in alignment with organizational goals and regulatory standards.
• Lead the development of security policies, standards, and guidelines, ensuring alignment with industry best practices (e.g., ISO 27001, NIST CSF).
• Collaborate with the CISO, CTO and other executive stakeholders to establish risk management frameworks and drive enterprise-wide security initiatives.

Cybersecurity Operations

• Govern and manage the Security Operations Center (SOC), ensuring effective monitoring and timely response to security incidents.
• Oversee the design and execution of robust cybersecurity operations, including threat detection, incident response, vulnerability management, and forensics for large platform with extended tech ecosystem 27x7x365.
• Lead efforts to identify, evaluate, and mitigate emerging threats, ensuring proactive risk management.

Compliance and Risk Management

• Lead and conduct regular risk assessments and audits to identify gaps in security controls and recommend actionable improvements.
• Ensure compliance with applicable data protection regulations (e.g., GDPR, CCPA) and industry-specific requirements (e.g., HIPAA, PCI DSS).
• Collaborate with legal, audit, and compliance teams to address security-related findings and ensure regulatory adherence.

Technology and Innovation

• Evaluate and implement advanced security technologies, including Zero Trust, Identity Access Management (IAM), and Security Information and Event Management (SIEM) solutions.
• Drive adoption of emerging security technologies and practices to enhance the organization's defense capabilities.
• Provide strategic guidance on secure software development and cloud security best practices.
• Build strong relationships with cross-functional teams, including IT, DevOps, and business units, to embed security into all aspects of operations.

Key Attributes & Skills:

• B.E./B.Tech degree. Preferably in Computer Science, Information Technology, Cybersecurity, or a related field.
• 14 - 16 years of progressive experience in IT security managing security for large scale organizations.
• Proven expertise in developing and managing enterprise cybersecurity programs in complex environments.
• Demonstrated experience in handling compliance and IT audits for security domain.
• Experience with cloud security (AWS, Azure, Google Cloud) and secure software development lifecycle (SDLC) is highly desirable.
• Relevant certifications such as CISSP, CISM, CISA, or equivalent are strongly preferred.

Note: Interested candidates may also applied through the link given below:

https://gstn.org.in/job-details/85