Chief Information Security Officer (CISO)

Dear Candidates,

Greetings!

Enclosed below the Job description-

About the Company:

We are a leading Omnichannel and Payment Solutions provider offering cloud-native UPI, IMPS, AEPS, and Digital Banking services to banks and financial institutions across India. Our mission is to enable secure, seamless, and scalable digital payment experiences that comply with the regulatory frameworks laid out by the RBI, NPCI, and CERT-In.

Role Overview:

The CISO will lead the companys cybersecurity strategy, governance, risk management, and compliance functions, with a focus on secure payment processing, data privacy, and cloud infrastructure protection. The role demands a deep understanding of payment systems (UPI, IMPS, AePS, BBPS, etc.), cloud security, financial regulations, and evolving cyber threats in the fintech ecosystem.

Key Responsibilities:

1. Information Security Strategy & Governance

• Develop and implement a comprehensive cybersecurity framework aligned with RBI, NPCI, CERT-In, ISO 27001, and PCI DSS.
• Lead the creation and maintenance of information security policies, standards, and procedures.
• Build a zero-trust architecture roadmap for cloud-based banking and payments infrastructure.

2. Cloud & Payment Systems Security

• Oversee security of UPI, IMPS, and other API-driven cloud-native payment platforms.
• Design secure deployment architectures on AWS, Azure, or OCI, including encryption, secure key management, container security, and API protection.
• Conduct VAPT, red-teaming, and threat modelling for core payment products.

3. Risk Management & Regulatory Compliance

• Ensure continuous compliance with RBI Master Directions on Digital Payment Security, NPCI guidelines, IT Act, and Data Privacy Laws.
• Serve as the companys point of contact for security audits by banks, regulators, and partners.
• Lead risk assessments, BCP/DR drills, and incident simulations.

4. Security Operations and Incident Response

• Establish and operate a 24x7 Security Operations Center (SOC) to monitor and respond to threats in real-time.
• Develop and maintain an incident response playbook, ensuring rapid containment and forensic analysis.
• Collaborate with law enforcement, regulators, and clients in case of major incidents or fraud attempts.

5. Stakeholder Engagement & Team Leadership

• Represent security posture to client CISOs, auditors, investors, and board.
• Build and mentor a high-performing InfoSec and Risk team, including AppSec, CloudSec, GRC, and Fraud Prevention specialists.
• Champion security-by-design across product, engineering, and operations teams.

Qualifications:

Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.

10+ years of experience in Information Security, with at least 3 years in a leadership/CISO role in fintech, banking, or payments domain.

In-depth knowledge of payment protocols, cloud-native architectures, and API security.

Certifications preferred: CISSP, CISM, CCSP, PCI-DSS Implementer, ISO 27001 LA.

Experience in interacting with RBI, NPCI, auditors, and client security heads.

Desired Attributes:

• Strong risk-based decision-making and analytical skills.
• Executive presence and communication ability to influence at board level.
• High integrity and a passion for secure, scalable digital financial infrastructure.
• Crisis management experience in cybersecurity or payment system incidents is a strong plus.

Regards,

Human Resource