Managing Director - Cybersecurity and Technology Risk

Role purpose

Lead cybersecurity and technology risk capability from India: build a scaled, resilient security and technology-risk organisation that protects customers and the Group, strengthens operational resilience, and meets regulatory expectations.

Key responsibilities

• Set the India strategy for cybersecurity and technology risk in line with the Group CISO and technology-risk leadership.
• Lead security operations (SOC, detection and response), threat intelligence, vulnerability and exposure management, identity and access management, application and cloud security, and security engineering.
• Lead technology risk and control functions: control assurance, technology resilience, third-party and cloud risk, and risk-and-control self-assessment.
• Own delivery of security transformation: zero trust, cloud security, DevSecOps, secure-by-design, data protection and AI security.
• Ensure compliance and readiness for regulatory and audit expectations (PRA/FCA operational resilience, DORA-style requirements, NIST, ISO 27001, CBEST and equivalent testing).
• Manage cyber incidents and crisis exercises; maintain strong relationships with Group risk, audit, regulators and business owners.
• Manage budget, workforce, vendor and tooling strategy; deliver measurable risk reduction and efficiency.
• Build scarce security talent, certifications and career pathways.

Qualifications and experience

• 18+ years in information security, technology risk or technology leadership, with 8+ years in senior security leadership in a bank or large regulated financial institution.
• Proven leadership of 24x7 security operations, security engineering and technology risk at scale (teams of 200 to 500+).
• Strong understanding of financial-services regulatory expectations, operational resilience and third-party risk.
• Experience handling major cyber incidents and engaging with regulators, auditors and boards.
• Relevant certifications (CISSP, CISM, CRISC or equivalent) are advantageous; advanced degree a plus.

Must-have: senior cyber or technology-risk leadership in a bank; running security operations or risk functions at scale; regulatory and audit engagement; major incident experience.

Good-to-have: cloud and DevSecOps security transformation; AI and data security; experience integrating India-based security operations into a global CISO model.