{"id":1758851,"url":"https://alion.io/job/crestxo-chief-information-security-officer","title":"Chief Information Security Officer","company":{"id":3876462,"name":"Crest'XO","domain":"crestxo.com","url":"https://alion.io/company/crest-xo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India","Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":27000,"max_usd":66000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":291},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-03T09:34:48Z","employer_posted_date":null,"last_verified_at":"2026-10-03T09:34:48Z","board_verified":false,"closed_at":null,"days_open":24,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":24},"description":"Key responsibilities:\n\nRegulatory compliance and governance:\n\n- Keep technology processes and policies compliant with the IT Act and with regulatory and statutory requirements, including RBI, SEBI, UIDAI and GDPR, working with internal and external stakeholders.\n\n- Track new government and regulatory guidelines on information technology and data security, and translate them into action for the business.\n\n- Run the IT committee calendar as required by the regulator and the Information Security Manual, and circulate minutes to members and business heads.\n\n- Maintain business-wise IT infrastructure records that the Compliance and Legal teams need for regulatory filings.\n\n- Review and complete mandatory IT submissions to regulatory bodies.\n\nIT policies and procedures:\n\n- Draft IT and information security policies and make sure they are followed at the operating level.\n\n- Keep the Information Security Manual and internal IT manuals current with regulation, business needs and technology changes.\n\n- Review processes periodically, flag the risks behind any gaps, and issue advisories to close them.\n\n- Introduce new policies based on audit observations and on industry benchmarking relevant to the business.\n\n- Set up and run vendor risk assessments and audits, and follow through on remediation.\n\n- Ensure key controls are executed consistently and that audit trails are available.\n\nRisk assessments and audits:\n\n- Plan and manage IT and information security risk assessments, IT audits and VAPT with internal teams, external auditors and vendors.\n\n- Lead periodic internal and external audits covering systems, processes and policies.\n\n- Close audit findings by amending existing controls or introducing new ones.\n\nCyber security and incident management:\n\n- Design, implement and maintain the Cyber Crisis Management Plan.\n\n- Make sure the right cyber security safeguards are designed and in place.\n\n- Lead incident management and resolution, and report incidents to management and the relevant regulators.\n\n- Provide IT and security information to partner functions and business teams when needed.\n\nBusiness continuity and disaster recovery:\n\n- Formulate, review and monitor business continuity plans and their implementation.\n\n- Coordinate BCP and DR drills and present the findings to management.\n\n- Keep BCP and DR plans updated as the business and technology landscape changes.\n\nWhat we are looking for:\n\nMust have:\n\n- 10+ years of professional experience in information security, IT risk or IT governance.\n\n- Hands-on experience implementing and auditing SOC 2 Type II (Trust Services Criteria).\n\nExperience and skills:\n\n- ISO 27001 readiness, implementation and audit.\n\n- SOX IT general controls (ITGC).\n\n- Strong command of information security concepts, principles and best practices.\n\n- Clear communication with internal and external stakeholders, and the ability to explain security and risk to both technical and non-technical audiences.\n\n- A collaborative working style across technology, compliance, legal and business teams.\n\n- High personal integrity and sound judgement in handling confidential matters\nSkills\nInformation Security, IT Risk Management, IT Governance, Cyber Security, IT Compliance, Business Continuity","description_format":"text","description_chars":3244,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-03T12:00:00Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.802,"p_room":0.75,"age_days":24,"expected_fill_days":28,"reasons":["seen:24","win:late"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/crestxo-chief-information-security-officer","json_url":"https://alion.io/job/crestxo-chief-information-security-officer.json","meta":{"generated_at":"2026-10-28T06:14:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8194,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3876462},"rest":"https://alion.io/mcp/rest/get_company?id=3876462"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrestxo-chief-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrestxo-chief-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrestxo-chief-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crestxo-chief-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrestxo-chief-information-security-officer"}]}