Chief Information Security Officer

Responsibilities

• Define and execute a 3-year information security roadmap to support the IPO transition
• Act as the primary interface with the RBI, CERT-In, and other regulatory bodies
• Lead the Information Security Committee and provide quarterly updates to the Board
• Design and oversee secure technology landscapes including AWS cloud security and API integrations
• Drive DevSecOps practices and oversee the Cyber Security Operations Center (CSOC)
• Oversee VAPT and Red Teaming exercises for all critical systems
• Ensure 100% adherence to RBI’s Master Direction on IT Governance, Risk, Control and Assurance
• Manage technical due diligence and security audits for all IT vendors
• Implement data protection strategies in line with the DPDP Act and ISO 27001

Requirements

• 15+ years of experience in Information Security
• Experience in Financial Services preferred
• Proven track record navigating RBI Master Directions and SEBI compliance
• Hands-on experience in Security Architecture, Cloud Security, and Application Security
• Experience managing significant cyber incidents within regulatory reporting windows
• Experience leading large-scale security transformations in BFSI or MNC environments

Preferred Qualifications

• CISSP or CISM certification
• CISA, CCISO, or ISO 27001 Lead Auditor certification

About the Company

InCred is an NBFC moving toward an IPO, requiring best-in-class risk performance and a robust security posture to support its growth and regulatory obligations.