Chief Information Security Officer (CISO)

As a Chief Information Security Officer (CISO) for one of Weekday's clients based in Mumbai, you will play a critical role in leading and strengthening the organization's information security, cybersecurity governance, risk management, and compliance programs. Your responsibilities will include defining and executing a comprehensive security strategy to protect business-critical systems, cloud infrastructure, customer data, and enterprise applications while ensuring compliance with industry regulations and security standards. Key Responsibilities: - Define and lead the enterprise-wide information security strategy, roadmap, policies, standards, and governance framework. - Establish risk management, security governance, and executive reporting mechanisms to provide visibility into the organization's security posture. - Lead compliance programs aligned with industry-recognized standards such as SOC 2 Type II, ISO 27001, and related frameworks. - Oversee enterprise security operations, monitoring, threat detection, incident response, and security event management functions. - Design and implement enterprise Privileged Access Management (PAM) strategies and controls. - Develop and maintain cloud security frameworks across AWS and modern cloud-native environments. - Serve as the primary security leader for executive management, customers, auditors, and external stakeholders. Qualifications Required: - 10+ years of experience in Information Security, Cybersecurity, Risk Management, or Security Operations, including leadership responsibilities. - Proven experience leading enterprise-wide Information Security and Security Governance programs. - Strong expertise in developing and implementing security strategies, frameworks, policies, and governance models. - Hands-on experience managing SIEM platforms, security monitoring, threat detection, and incident response programs. - Strong understanding of application security, DevSecOps, vulnerability management, and secure software development practices. - Professional certifications such as CISSP, CISM, CISA, CCSP, ISO 27001 Lead Auditor/Implementer, OSCP, or equivalent are highly desirable. If interested, you should possess a strong balance of leadership capabilities and technical expertise in cloud security, compliance frameworks, security architecture, and enterprise risk management. Your ability to translate complex security concepts into actionable business strategies, along with your stakeholder management and decision-making skills, will be crucial in this role. As a Chief Information Security Officer (CISO) for one of Weekday's clients based in Mumbai, you will play a critical role in leading and strengthening the organization's information security, cybersecurity governance, risk management, and compliance programs. Your responsibilities will include defining and executing a comprehensive security strategy to protect business-critical systems, cloud infrastructure, customer data, and enterprise applications while ensuring compliance with industry regulations and security standards. Key Responsibilities: - Define and lead the enterprise-wide information security strategy, roadmap, policies, standards, and governance framework. - Establish risk management, security governance, and executive reporting mechanisms to provide visibility into the organization's security posture. - Lead compliance programs aligned with industry-recognized standards such as SOC 2 Type II, ISO 27001, and related frameworks. - Oversee enterprise security operations, monitoring, threat detection, incident response, and security event management functions. - Design and implement enterprise Privileged Access Management (PAM) strategies and controls. - Develop and maintain cloud security frameworks across AWS and modern cloud-native environments. - Serve as the primary security leader for executive management, customers, auditors, and external stakeholders. Qualifications Required: - 10+ years of experience in Information Security, Cybersecurity, Risk Management, or Security Operations, including leadership responsibilities. - Proven experience leading enterprise-wide Information Security and Security Governance programs. - Strong expertise in developing and implementing security strategies, frameworks, policies, and governance models. - Hands-on experience managing SIEM platforms, security monitoring, threat detection, and incident response programs. - Strong understanding of application security, DevSecOps, vulnerability management, and secure software development practices. - Professional certifications such as CISSP, CISM, CISA, CCSP, ISO 27001 Lead Auditor/Implementer, OSCP, or equivalent are highly desirable. If interested, you should possess a strong balance of leadership capabilities and technical expertise in cloud security, compliance frameworks, security architecture, and enterprise risk management. Your ability to translate complex security concepts into actio