Chief Information Security Officer

Position Summary

The Chief Information Security Officer (CISO) will lead the company’s information security program from the Corporate Office in Hyderabad. This senior leadership role reports to the Managing Director and is responsible for setting up, running, monitoring, and continuously strengthening the organization’s Information Security Management System (ISMS), cybersecurity governance model, and Security Operations Center (SOC) oversight.

The role focuses on safeguarding engineering project information, BIM/CAD assets, GIS and LiDAR systems, client data, cloud environments, and core business applications from cyber threats such as ransomware, unauthorized access, and data leakage. The position also ensures alignment with ISO/IEC 27001, client security obligations, DPDP requirements, and CERT-In advisories.

Key Responsibilities

• Design and execute the enterprise cybersecurity roadmap, ISMS structure, and related information security policies.
• Perform security risk assessments and maintain the organization’s information security risk register.
• Direct SOC activities, including SIEM monitoring, threat intelligence, incident escalation, vulnerability management, and readiness against ransomware.
• Maintain round-the-clock visibility over networks, servers, endpoints, cloud systems, VPNs, remote project locations, and business applications.
• Lead cyber incident response, forensic support, disaster recovery planning, and business continuity execution.
• Ensure adherence to ISO/IEC 27001, the Indian IT Act, DPDP obligations, client security terms, and CERT-In expectations.
• Manage VAPT programs, cybersecurity audits, and closure of identified gaps and findings.
• Oversee protection, backup, retention, secure transfer, and safe disposal of organizational information assets.
• Assess the cybersecurity posture of vendors, consultants, cloud providers, and other third-party service partners.
• Drive cybersecurity awareness and phishing-prevention initiatives across the organization.

Deliverables and Governance Outputs

• Cybersecurity risk register and SOC governance framework
• SIEM monitoring reports and incident response procedures
• VAPT reports and vulnerability closure tracking
• Business continuity and disaster recovery plans
• Cybersecurity dashboards, threat intelligence updates, and MIS reports
• Information security policy manual and ISMS documentation

Qualification and Experience

A bachelor’s degree in Computer Science, IT, Cybersecurity, Electronics, or a related field is required; a master’s degree is preferred.

The role calls for 12 to 15 years of experience in information security, cybersecurity, or IT governance, including at least 5 years in a leadership capacity. Prior exposure to ISO/IEC 27001 implementation, SOC/SIEM environments, and multi-location organizations is preferred. Experience in engineering consultancy or infrastructure environments, especially with BIM and GIS, will be an added advantage.

Preferred Certifications

Candidates with any of the following certifications are preferred: CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, CEH, CompTIA Security+, CSA, GCIH, or CySA+.

Skills and Competencies

The role requires strong capability in ISMS and SOC management, SIEM oversight, incident handling, cybersecurity risk management, cloud and network security, vendor security review, leadership, analytical thinking, decision-making, and stakeholder coordination.

Authority and Working Relationships

The CISO may recommend cybersecurity controls and investments, initiate investigations and audits, escalate critical security risks, enforce information security policy compliance, and coordinate external cybersecurity assessments.

Internal stakeholders include Management, IMS, IT, HR, Finance, Project Managers, BIM/GIS teams, and divisional offices. External interactions may include clients, certification bodies, cybersecurity consultants, IT vendors, managed security service providers, and CERT-In empanelled agencies.

Performance Indicators

Success will be measured through ISMS compliance, MTTD and MTTR, vulnerability closure within SLA, reduction in cyber incidents, SOC effectiveness, security awareness impact, and disaster recovery test outcomes.

Additional Information

Employment is full time and the role is based in Hyderabad at the Corporate Office. The position is part of senior leadership and reports directly to the Managing Director.

Compensation is INR 25,00,000 per annum.