Deputy Chief Information Security Officer (Senior Director)

Location

Chennai | India

Job description

Job Description

About the Role:

When it comes to Cybersecurity, do you believe 'people' is the most important part of 'people, process and technology' Do you dream of ways to measure things Security controls Efficacy Do you have strong opinions about how cybersecurity should be managed Yet, at the same time, are you open to people disagreeing with you Are you a great communicator and enjoy explaining complex technical concepts to fifth graders or their equivalents Have you been on stage or on a podcast

If you were asked to list your favourite three leadership/management influences, could you easily rattle them off

Do you have experience besides Cybersecurity Have you been a developer in a past life A systems administrator An auditor

If you answered yes to most of the above questions, then this might be your role!

We are seeking a highly motivated, strategic thinker and tactical cybersecurity wizard to join our people-first cybersecurity leadership team as the Deputy Chief Information Security Officer.

This role will be based in Chennai, India, and will work with global resources and teams located in Chennai, India, EU, and the U.S.

Job Summary:

As the Deputy Chief Information Security Officer (DCISO) you will play a critical role in leading and strengthening our cybersecurity program. You will work closely with the CISO and executive leadership to develop and execute strategies that safeguard our information assets, maintain compliance, and ensure the security of our SaaS products and customer data. This role prioritizes leadership and team building, focusing on guiding a high-performing security team.

Responsibilities:

• Leadership and Team Building:
  • Provide visionary leadership to the security team, fostering a culture of collaboration, innovation, and excellence.
  • Develop and mentor a diverse and highly skilled team of security professionals, nurturing their growth and career development.
  • Collaborate with cross-functional teams to build a security-conscious organizational culture and promote security awareness.
• Strategy and Governance:
  • Assist the CISO in developing and implementing the company's information security strategy and policies.
  • Contribute to the creation and maintenance of an effective security governance framework.
  • Ensure alignment of security initiatives with business objectives and industry best practices.
• Risk Management:
  • Identify and assess security risks, vulnerabilities, and emerging threats to the organization.
  • Own the development and implementation of risk mitigation strategies and incident response plans.
  • Regularly oversee the review of security controls and processes to maintain a strong security posture.
• Compliance and Regulatory Oversight:
  • Monitor and ensure compliance with relevant data protection laws and industry regulations.
  • Oversee the preparation and submission of compliance reports and certifications.
  • Collaborate with legal and regulatory teams to address compliance issues.
• Incident Response and Recovery:
  • Help lead incident response efforts in the event of security breaches or incidents, coordinating with internal and external stakeholders.
  • Drive the development and maintenance of an effective incident response plan to minimize business impact.
• Vendor and Third-Party Risk Management:
  • Govern the evaluation and management of the security posture of third-party vendors and partners.
  • Establish and maintain strong vendor security relationships and agreements.
• Security Awareness and Training:
  • Help promote security awareness and training programs across the organization.
  • Develop and deliver security training materials and resources to educate employees on security best practices.
• Budget Oversight:
  • Manage and oversee the cybersecurity budget, ensuring efficient allocation of resources and cost-effective security solutions.
• Product Security
  • Support penetration testing teams exploiting web and mobile application security flaws such as SSRF, SQLi, RCE, and DNS binding attacks.
  • Guide the implementation of AuthN/AuthZ mechanisms and the building of robust RBAC controls like SAML, OAuth, OpenID, etc.
  • Assist product security teams in building resilient, highly available systems, identifying security vulnerabilities in our products and addressing them, and reducing friction in the SDLC pipelines while improving security controls.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field a master's degree is a plus. Must have at least one of these relevant certifications (e.g., CISSP, CISM, CISA).
• Proven experience (8+ years) in cybersecurity, with at least 3 years in a leadership or strategic role managing more than one cybersecurity function (e.g. SOC & GRC, Application Security & Incident Response) either concurrently or consecutively. 12+ years of overall experience.
• Strong understanding of cybersecurity principles, technologies, and best practices.
• Excellent project management and organizational skills, with a track record of successfully managing complex initiatives.
• Exceptional, master's degree level of written communication skills. Above average, dare we ask for remarkable interpersonal skills, with the ability to interact effectively with executives, technical teams, and external partners.
• Advanced stage presence: ability to speak and present in front of large groups, ability to write and communicate to U.S. and India audiences.
• Strategic thinker with the ability to analyze and solve complex problems.
• Knowledge of regulatory requirements and compliance standards related to cybersecurity.

Additional Information

All your information will be kept confidential according to EEO guidelines.

At Freshworks, we are creating a global workplace that enables everyone to find their true potential, purpose, and passion irrespective of their background, gender, race, sexual orientation, religion and ethnicity. We are committed to providing equal opportunity for all and believe that diversity in the workplace creates a more vibrant, richer work environment that advances the goals of our employees, communities and the business.

At Freshworks, we are creating a global workplace that enables everyone to find their true potential, purpose, and passion irrespective of their background, gender, race, sexual orientation, religion and ethnicity. We are committed to providing equal opportunity for all and believe that diversity in the workplace creates a more vibrant, richer work environment that advances the goals of our employees, communities and the business.

Job tags

Salary