Chief Information Security Officer

About Celebal Technologies

Celebal Technologies is a prominent company specializing in Data, Cloud, Analytics, and AI services, supporting worldwide enterprises in accelerating digital transformation by leveraging Microsoft technologies, Data & AI platforms, and Agentic AI solutions. Operating across APJ, EMEA, and the Americas, the company serves sectors including banking, manufacturing, retail, healthcare, energy, and other regulated industries.

Role Overview

The organization is looking for a seasoned and business-focused Chief Information Security Officer (CISO) to lead the company's global initiatives in information security, cyber risk, privacy, and compliance. The CISO will safeguard company assets such as information, cloud infrastructure, applications, intellectual property, employee data, and customer information. The role emphasizes enhancing security governance, managing cyber risks, ensuring adherence to regulatory and contractual obligations, and integrating best security and data governance practices within the company and its delivery functions.

The CISO will collaborate closely with business leaders, technology teams, HR, legal, finance, and delivery units to cultivate a robust security culture that facilitates business growth.

Key Responsibilities

• Develop and implement the organization's information security strategy, policies, standards, and risk management framework.
• Establish enterprise-wide security governance and cyber risk management protocols.
• Identify, evaluate, and mitigate cybersecurity risks impacting infrastructure, cloud platforms, applications, and business processes.
• Report security risks, compliance states, and remediation plans to executive leadership.
• Maintain compliance with ISO 27001, SOC 2, GDPR, India DPDP Act, and client-specific security requirements.
• Lead internal, external, and customer security audits while managing prompt remediation of any findings.
• Oversee third-party and vendor security risk assessments.
• Ensure fulfillment of contractual security and data protection commitments.
• Supervise security architecture and controls across cloud, network, endpoints, identity, and data environments.
• Drive adoption of security best practices within Microsoft Azure environments, including Defender, Sentinel, Entra ID, and Purview.
• Lead vulnerability management, threat monitoring, incident response, and initiatives to ensure cyber resilience.
• Manage business continuity and disaster recovery planning.
• Work with Delivery POD leaders to integrate cybersecurity, privacy, and data governance into project delivery, promoting secure, compliant, and effective client engagements.
• Advocate for secure development, access control, data protection, and cloud security standards among delivery teams.
• Assist project teams in recognizing and mitigating security risks throughout delivery.
• Foster a security-first culture by implementing ongoing training, awareness programs, cyber drills, and promoting cybersecurity and data protection best practices.
• Conduct employee security awareness campaigns, phishing simulations, and policy education efforts.
• Promote accountability in responsible data handling and compliance across all departments.
• Lead data privacy initiatives and governance practices for AI, GenAI, and emerging technology platforms.
• Monitor evolving cybersecurity and regulatory landscapes to ensure organizational preparedness.

Qualifications & Experience

• More than 15 years of experience in information security, cybersecurity, risk management, or related disciplines.
• At least 5 years in a senior security leadership role such as CISO, Deputy CISO, or Head of Security.
• Proven expertise in security governance, risk management, compliance, and audit processes.
• Practical knowledge of cloud security, ideally Microsoft Azure.
• Comprehensive understanding of ISO 27001, SOC 2, NIST CSF, GDPR, India DPDP Act, and industry best security practices.
• Background working within IT services, consulting, cloud, data, or technology organizations.
• Strong communication and stakeholder engagement capabilities.

Required Certifications (At Least One)

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)

Preferred Certifications

• CCSP (Certified Cloud Security Professional)
• CISA (Certified Information Systems Auditor)
• CRISC (Certified in Risk and Information Systems Control)
• ISO 27001 Lead Auditor / Lead Implementer
• Microsoft Cybersecurity Architect Expert (SC-100)

Indicators of Success

• Meaningful enhancements to the organization's security posture and cyber resilience.
• Effective maintenance and improvement of critical compliance certifications and audit results.
• Integration of security and data governance into everyday operations and project execution.
• Elevated employee engagement and practice of cybersecurity standards.
• Developing a scalable security architecture that supports global expansion and AI-driven initiatives.