Chief Information officer

Job Description:

Key Responsibilities
Security Strategy Development:
• The CISO takes a strategic approach to security identifying emerging threats and implementing
proactive measures to protect the organization. They work closely with other stakeholders to align
security initiatives with business goals.
Risk Assessment and Management:
• The CISO assesses the organization's security risks including potential vulnerabilities and potential
impact. They develop risk mitigation strategies and controls to minimize exposure to threats.
Security Policy and Compliance:
• The CISO develops and enforces security policies and procedures to ensure compliance with
applicable laws regulations and industry standards. They also oversee security awareness and
training programs to educate employees on best practices and their role in safeguarding
information.
Incident Response and Management:
• The CISO develops and maintains an incident response plan to address security incidents
promptly and effectively. They coordinate with relevant stakeholders to contain investigate and
remediate security breaches or incidents.
Security Policy and Compliance:
• The CISO develops and enforces security policies and procedures to ensure compliance with
applicable laws regulations and industry standards. They also oversee security awareness and
training programs to educate employees on best practices and their role in safeguarding
information.
Security Monitoring and Incident Detection:
• The CISO oversees the implementation and maintenance of security monitoring tools and
technologies to detect and respond to security threats. They collaborate with the IT department to
ensure effective monitoring of networks systems and applications.
Vendor and Third-Party Risk Management:
• The CISO assesses and manages the security risks associated with third-party vendors and suppliers.
They establish criteria for evaluating vendor security controls and ensure that appropriate measures
are in place to protect the organization's data and systems.
Security Awareness and Training:
• The CISO develops and delivers security awareness programs to educate employees on security
best practices and cyber threats. They promote a culture of security awareness and accountability
throughout the organization.
Incident Reporting and Communication:
• The CISO is responsible for reporting security incidents to senior management regulatory
authorities and other stakeholders as required. They communicate security risks incidents and
initiatives to relevant parties ensuring transparency and timely response
Market knowledge:
• The CISO must have awareness and understanding of the wider business, economic and market
environment in which Niva Bupa operates, specifically in the Indian Insurance environment.