Chief Information Security Officer

Muthoot FinCorp Ltd., the flagship company of the Muthoot Pappachan Group (also known as Muthoot Blue), is one of India's leading non-banking financial companies (NBFCs). With a legacy spanning over 137+ years, the company has established a vast network of over 3,700+ branches across the country, serving more than 100,000 customers daily.

Muthoot Fincorp is hiring Chief Information Security Officer for the group subsidiary - Muthoot Housing Finance Company Ltd, based out of Mumbai.

Chief Information Security Officer

Role Summary

The CISO will be responsible for developing and implementing an information security strategy. Identifying and assessing security risks and Implementing security measures to mitigate risks. Ensure compliance with regulations and industry standards and raising security awareness.

Key Attributes

• Risk Identification, Management and Mitigation
• Ability to liaison with both internal and external stakeholders.
• In-depth understanding of NHB guidelines and other relevant regulations.
• Ability to analyse complex data and identify potential risks and resolve issues.
• Policy development and administration

Role & responsibilities

• Leading the development and implementation of the information security strategy.
• Overseeing the protection of company data, intellectual property, and technology assets from cyber threats.
• Developing and enforcing security policies, procedures, and protocols that align with business goals and regulatory requirements.
• Identifying and mitigating security risks, ensuring the organisation remains resilient against emerging threats.
• Ensuring the companys compliance with industry standards and regulations.
• Managing security audits, compliance assessments, incident response processes, and investigating security breaches.
• Collaborating with cross-functional teams to integrate security measures into the companys IT and business operations.
• Leading security awareness training programs for employees to promote a culture of cybersecurity across the organisation.
• Staying updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.
• Develop, implement, and maintain a comprehensive security program that includes cyber defence, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritise remediation efforts to reduce risk exposure.
• Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches
• Implement and leverage technological solutions for effective risk monitoring and management
• Coordinate and lead in implementation of Business Continuity Plan (BCP).

Education Qualification

Masters degree in information security, Computer Science, Risk Management or a related field

Experience

12 15 years