Chief Information Security Officer (CISO)

Company Overview

White Oak Capital is an investment management firm managing over $11 billion of Assets Under Management (AUM) across India and Global Emerging Markets. Founded by Prashant Khemka, former CIO of Emerging Markets Equity and India Equity at Goldman Sachs Asset Management, the firm operates with a global presence including offices in India, Singapore, Switzerland, Dubai, Mauritius, and the UK. The company fosters a dynamic and professional environment focused on strategic investment and financial excellence.

Job Summary

The Chief Information Security Officer (CISO) will provide strategic and operational leadership for White Oak Capital’s cybersecurity and information security functions. The role involves developing and maintaining a comprehensive security framework to safeguard sensitive data, digital assets, investor information, applications, and technology infrastructure. The CISO will ensure compliance with regulatory standards such as SEBI and AMFI, manage cyber risks, lead incident response efforts, and promote a security-aware culture across the organization. This position is critical in aligning cybersecurity initiatives with the firm’s business objectives and regulatory requirements.

Responsibilities

• Develop and implement the organization’s cybersecurity and information security strategy, policies, standards, and frameworks, ensuring continuous improvement.
• Establish and oversee security governance, controls, and monitoring mechanisms across all organizational units.
• Identify emerging cybersecurity threats and implement appropriate mitigation measures to protect organizational assets.
• Ensure compliance with regulatory requirements such as SEBI cybersecurity guidelines, AMFI standards, and other relevant industry regulations.
• Lead cyber risk management, including assessment and mitigation of risks associated with third-party vendors and technology partners.
• Build and maintain a robust threat intelligence program, proactively identifying vulnerabilities and attack vectors.
• Establish and manage incident detection, response, escalation, and recovery processes to ensure rapid and effective handling of cybersecurity incidents.
• Oversee Business Continuity Planning (BCP) and Disaster Recovery (DR) strategies, conducting regular testing and updates.
• Drive organization-wide cybersecurity awareness and training programs, including mock drills and phishing simulations.
• Ensure protection of sensitive data related to investors, employees, and organizational operations, maintaining data privacy and confidentiality.
• Collaborate with senior management, internal teams, external auditors, regulators, and third-party vendors to embed security best practices into business processes.
• Provide regular updates and reports on cybersecurity risks, incidents, and compliance status to executive leadership and governance forums.

Qualifications

• 15+ years of relevant experience in Information Security, Cybersecurity, Technology Risk, or related fields.
• Strong knowledge of cybersecurity frameworks, principles, and risk management practices.
• In-depth understanding of regulatory requirements related to information security, including SEBI, AMFI, and other financial industry standards.
• Experience in cyber risk assessment, threat intelligence, vulnerability management, and incident response.
• Proven expertise in third-party/vendor cybersecurity risk management.
• Knowledge of Business Continuity Planning (BCP), Disaster Recovery (DR), and cyber resilience.
• Excellent stakeholder management, communication, and leadership skills.
• Ability to work effectively with senior management, technology teams, auditors, regulators, and external partners.
• Educational qualifications such as BTech, BSc, MSc, or equivalent in relevant fields.

Preferred Skills

• Professional certifications such as CISSP, CISM, CRISC, CISA, ISO 27001, or equivalent.
• Experience in Financial Services, Mutual Funds, Asset Management, or Banking industries.
• Prior experience managing cybersecurity within regulated financial environments.
• Strong understanding of international cybersecurity standards and best practices.
• Ability to develop and execute cybersecurity awareness and training programs.

Experience

• Minimum 15 years of relevant experience in Information Security, Cybersecurity, or Technology Risk Management.
• Prior experience in regulated financial sectors such as Mutual Funds, Asset Management, Banking, or Financial Services is preferred.
• Demonstrated success in leading cybersecurity initiatives in complex organizational settings.

Environment

The role is based in a professional office environment, with potential for hybrid work arrangements depending on organizational policies. The position involves collaboration with global teams and external stakeholders, requiring adaptability to different time zones and regulatory environments. The work may involve occasional travel for audits, training, or strategic meetings.

Salary

Salary details are not specified and will be commensurate with experience and qualifications.

Growth Opportunities

Opportunities for career advancement include Senior Leadership roles within the organization’s risk and compliance functions, or broader executive positions such as Chief Risk Officer or Chief Operating Officer, depending on organizational growth and individual performance.

Benefits

Benefits details are not specified in the provided information. Typically, such roles include health insurance, performance bonuses, professional development support, and other standard corporate benefits.