Chief Information Security Officer
TrustFabric
Mumbai, Maharashtra, India3h agovia LinkedIn
About the Role
The Chief Information Security Officer (CISO) is a full-time, on-site role based in Mumbai, responsible for leading TrustFabric’s information security strategy and operations. This role oversees the design, implementation, and continuous improvement of security policies, controls, and frameworks aligned with DPDP and other relevant regulations.
Key Responsibilities
- Oversee the design, implementation, and continuous improvement of security policies, controls, and frameworks aligned with DPDP and other relevant regulations.
- Manage risk assessments, incident response, and business continuity planning.
- Work closely with engineering, product, and compliance teams to embed security into platform design and integrations.
- Monitor cybersecurity posture.
- Guide secure application development.
- Coordinate security audits.
- Report security metrics and risks to executive leadership.
- Drive security awareness across the organization.
- Engage with customers, regulators, and partners to demonstrate TrustFabric’s security and compliance commitments.
Requirements & Tech Stack
- Information Security Management
- Information Security
- Security Governance
- Security Policies
- Risk Management
- Cybersecurity
- Network Security
- Cloud Security
- Threat Detection
- Incident Response
- Application Security
- Secure Software Development Practices
- Code Review
- Vulnerability Management
- Business Continuity Planning
- Disaster Recovery
- Data Protection Regulations
- Privacy Regulations (e.g., DPDP, GDPR or similar frameworks)
- Regulatory Compliance Practices
- Leadership experience in a senior security role
- Ability to collaborate with cross-functional teams.
- Ability to communicate complex security topics clearly to technical and non-technical stakeholders.
Qualifications
- Proven leadership experience in a senior security role, preferably in SaaS or data-focused organizations.
- In-depth knowledge of data protection and privacy regulations (e.g., DPDP, GDPR or similar frameworks) and regulatory compliance practices.
- Relevant certifications such as CISSP, CISM, CISA, or equivalent are highly beneficial.