Digital Security Officer (DSO)

Location:

Department:

Employment Type:

Kindly share your resumes to below email ID.

Email : [HIDDEN TEXT]

Role Overview

The Digital Security Officer (DSO) is responsible for safeguarding the organization's digital platforms, applications, infrastructure, and data. The role ensures robust security controls, regulatory compliance, and proactive risk management across cloud, SaaS, and enterprise environments.

Key Responsibilities

Security Governance & Strategy

Define and maintain the organization's digital security strategy aligned with business goals

Develop and enforce security policies, standards, and procedures

Ensure compliance with ISO 27001, SOC 2, GDPR, DPDP Act, and NIST

Risk & Compliance Management

Identify and mitigate cyber and digital security risks

Maintain the information security risk register

Support internal and external audits

Identity & Access Management (IAM)

Enforce least-privilege and role-based access control

Oversee user provisioning and access reviews

Ensure MFA and PAM enforcement

Infrastructure, Cloud & Application Security

Enforce secure baseline configurations (CIS Benchmarks)

Oversee hardening of servers, endpoints, networks, and cloud workloads

Ensure secure DevSecOps practices

Data Protection & Privacy

Ensure encryption, data classification, and secure handling

Support compliance with GDPR, DPDP, and CCPA

Vulnerability & Patch Management

Oversee vulnerability scanning and remediation

Ensure timely deployment of critical security patches

Security Monitoring & Incident Response

Oversee SIEM and SOC operations

Lead incident response and investigations

Third-Party & Vendor Security

Conduct vendor risk assessments

Govern API and integration security

Awareness & Training

Drive organization-wide security awareness programs

Business Continuity & Disaster Recovery

Define and test BCP/DR plans

Required

Bachelor's degree in Computer Science or related field

35 years of experience in information security

Strong knowledge of cloud security, SaaS, APIs, and DevSecOps

Preferred Certifications (Not mandatory)

ISO 27001 Lead Implementer / Auditor

CISSP / CISM / CCSP