Technical Information Security Officer; TISO), AVP

Technical Information Security Officer (TISO), AVP    

Position Overview

Job Title:

Technical Information Security Officer (TISO)
Corporate

Title:

Assistant Vice President

Location:

Pune, India

Role Description
A Technical Information Security Officer (TISO) works under the guidance of the Divisional TISO and is responsible for the security of assigned IT assets. These assets may include application software, related databases, infrastructure components, IT services, hardware, and facility‑related IT systems.
The TISO assumes full security ownership for these assets and performs tasks in line with defined and approved rules, standards, and processes. Core responsibilities include conducting risk and compliance assessments, defining and reviewing security requirements, approving access control configurations, and ensuring the implementation of appropriate security controls.
The role also involves collaborating with key stakeholders to design secure environments, perform risk assessments, and maintain proper documentation for all risk management activities. Additionally, the TISO contributes to the development of IT risk policies and standards, ensuring compliance and mitigating potential security risks across the assigned landscape.

What we'll offer you
As part of our flexible scheme, here are just some of the benefits that you'll enjoy
Best in class leave policy
Gender neutral parental leaves
100% reimbursement under childcare assistance benefit (gender neutral)
Sponsorship for Industry relevant certifications and education
Employee Assistance Program for you and your family members
Comprehensive Hospitalization Insurance for you and your dependents
Accident and Term life Insurance
Complementary Health screening for 35 yrs. and above

Your key responsibilities
As a Technical Information Security Officer (TISO), you will be entrusted with a critical role in ensuring the security of our IT assets. Your key responsibilities include:
Ownership and Risk Management :
Assume ownership of assigned IT assets, including application software, databases, infrastructure, and outsourced IT services. Conduct comprehensive risk and compliance assessments to ensure security measures are in place.
Guidance and Implementation :
Provide expert guidance to IT Asset Owners (ITAOs) and Information Security Officers (ISOs) on security requirements and the implementation of compensating controls. Ensure security is integrated early in the system development life cycle.
Access Control and Authorization :
Approve access control setups and user authorization for assigned IT assets. Perform periodic recertification of access rights in compliance with organizational policies.
Security Controls :
Ensure the implementation of necessary information security controls. Influence and provide feedback on IT risk and control-related policies and standards. Design and oversee the implementation of security measures.
Collaboration and Coordination :
Work closely with ITAOs and other ISO role to establish monitoring capabilities for IT assets. Review monitoring outputs to maintain the required security level and advise on remediation of gaps.
Incident Management :
Contribute to the Information Security Incident Management Process in case of security breaches for assigned IT assets.
Documentation and Compliance :
Maintain thorough documentation of information security risk management activities, including major decisions, identified risks, and mitigation measures. Ensure compliance with internal policies and standards.
Escalation and Conflict Resolution :
Serve as the first point of escalation and conflict resolution, both internally and with external parties such as regulators.
Regulatory Awareness :
Pre-empt changes in the legal and regulatory environment and advise senior management on potential impacts. Oversee the performance and quality assurance of assessment executions for audits and regulatory compliance.
Senior Management Support :
Ensure appropriate senior management awareness and oversight to follow up on action items and resolve identified issues.
Cloud Security :
Implement and manage security measures for cloud-based services and infrastructure to…