NABFINS AGM-CISO Recruitment 2026 – Chief Information Security Officer, Bengaluru | Apply by 28 Oct

NABFINS Ltd (NABARD Financial Services Limited), Head Office Bengaluru, invites applications for the post of Chief Information Security Officer (CISO) — AGM level. Job Code: Nabfins/OPS/1152.

Mandatory Eligibility

• Minimum 5+ years of experience in IT/Information Security, with at least 2 years in a senior leadership role (CISO / Deputy CISO / Head of Information Security).
• Qualified with at least two of the following certifications: CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CEH (Certified Ethical Hacker).
• Proven experience as a CISO or similar role in information security management and cybersecurity for at least 2 years — OR experience in Information Security/Cyber Security domains for at least 5 years.
• Graduation, preferably a degree in Engineering, Computer Science/Information Technology or its equivalent.
• Experience and knowledge of security best practices across IT domains (infrastructure, application, enterprise architecture), designing and deploying security solutions, the IT regulatory framework, and cyber incident response and coordination.

Role and Responsibilities

• Oversee the organisation-wide information security strategy, and develop, implement and monitor enterprise-wide information security and IT risk management.
• Ensure compliance with the IT Act, Digital Personal Data Protection (DPDP) Act, IRDAI Cybersecurity Guidelines, CERT-In circulars and RBI guidelines; coordinate with RBI, NABARD, IRDAI and CERT-In CSITE.
• Lead the Data Governance framework — data classification, retention and access controls — and oversee closure of audit observations from regulators, statutory auditors and IT audits (IS audit, VAPT, IRDAI/RBI/NABARD audits).
• Brief top management, the Risk Management Committee and the Board Risk/IT Committee on cyber security posture, risks and compliance; prepare Board/IT committee agendas and executive dashboards.
• Conduct enterprise-wide cyber risk assessment across branches, HO and applications; define Key Risk Indicators (KRI) for monitoring cyber resilience.
• Lead strategic response to information security incidents, post-event analysis and drafting replies to regulator queries; conduct ISC meetings, awareness training and cyber resilience activities.
• Collaborate with CTO/CIO on enterprise-wide disaster recovery plans; negotiate contracts with security product and service vendors; review IT/IS policies annually.

Knowledge and Competence Areas

• Cyber risk management, information security risk management, third-party risk and supply chain security, cyber insurance, risk quantification.
• SIEM and SOC operations, incident detection and response (EDR), threat intelligence, advanced threat hunting.
• Identity and Access Management (IAM), Privileged Access Management (PAM), Network Access Control (NAC), Zero Trust Architecture (ZTA).
• Cloud application and infrastructure security, cloud security, virtualization, secure SDLC, DevSecOps, API security.
• Data protection and resilience, data security, DLP, security testing, DR & BCP, crisis management, security automation, AI/ML in threat detection.

How to Apply

• Interested candidates should send their resume to [email protected].
• Last date to apply: 28 October 2026.
• Keep the job code Nabfins/OPS/1152 handy while applying; the job description and application form are available on the NABFINS careers page.