Deputy Chief Information Security Officer - Bank/Financial Services

Deputy CISO (For leading bank)

Key Position Responsibilities :

Direct Responsibilities :

Board and Committee Reporting :

- Present quarterly reviews of cybersecurity preparedness to the board or IT sub committee.

- Inform board members about vulnerabilities and IT risks.

Committee Participation :

- Act as member secretary of the IT Security Committee.

- Serve as an invitee to the IT Strategy and IT Steering Committees.

Policy and Risk Management :

- Ensure adherence to the Information Security Policy.

- Assess and manage risks related to information assets and data.

- Oversee the Security Operation Center.

- Develop strategies for incident identification and response.

- Ensure compliance with regulatory requirements (e.g., RBI/CSITE).

- Implement information security strategies and tools.

- Prepare Key Risk Indicators (KRI) and Key Performance Indicators (KPI).

- Monitor and manage cyber risks and new threats.

- Analyze the cyber threat landscape and update security strategies.

Risk Management :

Risk Identification and Assessment :

- Identify, assess, and evaluate risks to support enterprise risk management.

- Maintain a risk register and analyze risk scenarios.

Risk Response and Monitoring :

- Develop and implement risk responses.

- Monitor risks and communicate status to stakeholders.

- Ensure compliance and corrective actions.

Information Systems Control :

Control Design and Implementation :

- Design and implement information systems controls.

- Evaluate and recommend tools to automate control processes.

Control Monitoring and Maintenance :

- Monitor and maintain information systems controls.

- Conduct testing and review to identify deficiencies.

Governance and Compliance :

Policy Development and Compliance :

- Develop and maintain information security policies.

- Ensure policies meet regulatory requirements and best practices.

Audit and Review Facilitation :

- Liaise with auditors and consultants.

- Track and address audit issues.