01Overview
Position : Chief Information Security Officer (CISO)
Department : Information Technology
Reporting To : Managing Director
Location : Corporate Office Hyderabad
Employment Type: Full Time
Grade : Senior Leadership
Position Purpose
Responsible for establishing, implementing, monitoring, and continually improving the organizations Information Security Management System (ISMS), cybersecurity governance framework, and Security Operations Center (SOC) oversight across Aarvee Engineering Consultants Limited. The role ensures protection of engineering project data, BIM/CAD, GIS & LiDAR systems, client information, cloud platforms, and business systems against cyber threats, ransomware, unauthorized access, and data leakage while ensuring compliance with ISO/IEC 27001, client cybersecurity requirements, DPDP requirements, and CERT-In advisories.
Key Responsibilities
Develop and implement enterprise-wide cybersecurity strategy, ISMS framework, and information security policies.
Conduct cybersecurity risk assessments and maintain Information Security Risk Registers.
Oversee SOC operations, SIEM monitoring, threat intelligence, incident escalation, vulnerability management, and ransomware preparedness.
Ensure continuous monitoring of networks, servers, endpoints, cloud platforms, VPNs, remote project offices, and business applications.
Lead cybersecurity incident response, digital forensics, disaster recovery, and business continuity activities.
Ensure compliance with ISO/IEC 27001, Indian IT Act, DPDP requirements, client cybersecurity obligations, and CERT-In requirements.
Coordinate VAPT activities, cybersecurity audits, and closure of audit findings.
Ensure protection, backup, retention, secure transfer, and disposal of organizational information assets.
Evaluate cybersecurity posture of vendors, consultants, cloud providers, and thirdparty service providers.
Qualification & Experience
Bachelors degree in Computer Science / IT / Cybersecurity / Electronics or related discipline; Masters degree preferred.
1215 years of experience in Information Security / Cybersecurity / IT Governance with minimum 5 years in leadership role.
Experience in ISO/IEC 27001 implementation, SOC/SIEM environments, and multilocation organizations preferred.
Exposure to engineering consultancy, infrastructure, BIM/GIS environments desirable.
Preferred Certifications
CISSP, CISM, CISA, ISO/IEC 27001 Lead Implementer/Lead Auditor, CEH, CompTIA Security+, CSA, GCIH, CySA+.
Skills & Competencies
ISMS & SOC management, SIEM monitoring, incident response, cybersecurity risk management, cloud/network security, vendor security assessment, leadership, analytical ability, decisionmaking, and stakeholder management.
KPIs
ISMS compliance status, MTTD & MTTR, vulnerability closure within SLA, reduction in cybersecurity incidents, SOC effectiveness, security awareness effectiveness, and disaster recovery testing success.
Authority
Authorized to recommend cybersecurity controls and investments, initiate cybersecurity investigations/audits, elevate critical cyber risks, enforce compliance with information security policies, and coordinate external cybersecurity assessments.
Working Relationships
Internal: Management, IMS, IT, HR, Finance, Project Managers, BIM/GIS Teams, Divisional Offices.
External: Clients, Certification Bodies, Cybersecurity Consultants, IT Vendors, Managed Security Service Providers (MSSPs), CERTIn empanelled agencies.
Specific Focus Areas
Conduct organizationwide cybersecurity awareness and phishing prevention programs.
Key Deliverables
Information Security Policy Manual & ISMS Documentation. . .
