General Manager - Information Security (Chief Information Security Officer)

ABOUT National Testing Agency

𝗧𝗵𝗲 𝗡𝗮𝘁𝗶𝗼𝗻𝗮𝗹 𝗧𝗲𝘀𝘁𝗶𝗻𝗴 𝗔𝗴𝗲𝗻𝗰𝘆 (𝗡𝗧𝗔) is India's 𝗽𝗿𝗲𝗺𝗶𝗲𝗿 𝗮𝘂𝘁𝗼𝗻𝗼𝗺𝗼𝘂𝘀 𝘁𝗲𝘀𝘁𝗶𝗻𝗴 𝗼𝗿𝗴𝗮𝗻𝗶𝘀𝗮𝘁𝗶𝗼𝗻, established in 𝟮𝟬𝟭𝟳 under the 𝗗𝗲𝗽𝗮𝗿𝘁𝗺𝗲𝗻𝘁 𝗼𝗳 𝗛𝗶𝗴𝗵𝗲𝗿 𝗘𝗱𝘂𝗰𝗮𝘁𝗶𝗼𝗻, 𝗠𝗶𝗻𝗶𝘀𝘁𝗿𝘆 𝗼𝗳 𝗘𝗱𝘂𝗰𝗮𝘁𝗶𝗼𝗻, 𝗚𝗼𝘃𝗲𝗿𝗻𝗺𝗲𝗻𝘁 𝗼𝗳 𝗜𝗻𝗱𝗶𝗮. NTA is entrusted with conducting high-stakes national entrance and eligibility examinations — including NEET (UG), JEE Main, CUET (UG & PG), UGC-NET, CSIR-NET, CMAT, and several other assessments — that collectively serve tens of millions of students and aspirants across the country each year.

Nature of Engagement

• Contract, initially for a period of three (3) years, extendable based on performance and organisational requirement.

Age Limit

• Preferably below 55 years as on the last date of application. Relaxation may be considered for exceptional candidates with strong cyber-security leadership credentials.

Remuneration

• Consolidated monthly remuneration, commensurate with qualifications, experience and industry benchmarks, to be decided by the competent authority. The remuneration package will be competitive and negotiable for exceptional candidates.

Qualifications and Experience

• B.E. / B.Tech. / M.E. / MTech. / M.Sc. in Computer Science, Information Technology, Electronics, Cyber Security, or an allied discipline from a recognised university or institution of repute. A Master's degree or higher in Cyber Security or Information Security will be an added advantage.
• Consistently good academic record.
• Minimum 12 years of post-qualification experience in information

Essential Qualifications

• security, cyber security, security operations, or allied functions.
• Of these, at least 5 years must be at a senior leadership level (e.g., Chief Information Security Officer, Head of Information Security, Senior Director - Cyber Security, Vice President - Information Security) in a large enterprise.
• At least one professional certification in information security from among: CISSP, CISM, CISA, CRISC, CGEIT, CCISO, OSCP, GIAC (any track), or equivalent from a recognised international body.

Desirable Experience

• Prior experience as CISO or Head of Information Security in a large transaction-intensive organisation - banking, financial services, telecom, e-commerce, e-governance, or major public-sector technology platform.
• Demonstrated experience of having successfully led the response to at least one major cyber-incident from detection through containment, eradication, recovery and post-incident review.
• Experience of running an in-house or outsourced 24x7 Security Operations Centre (SOC) at scale.
• Prior engagement with CERT-In, NCIIPC, MeitY, STQC or similar Government cyber security bodies on advisories, audits or incident reporting.
• Familiarity with the Digital Personal Data Protection Act 2023 and its operational implementation, including the role of the Data Protection Officer.
• Experience of cloud security architecture across AWS, Azure or GCP - including identity, network, data, workload and DevSecOps controls.
• Familiarity with ISO 27001, NIST CSF, PCI DSS, SOC 2, and other recognised cyber-security frameworks.

Skills and Competencies

• Strong technical command across the information-security stack - network security, application security, endpoint security, cloud security, identity & access, data protection, cryptography and DevSecOps.
• Excellent governance instincts - ability to define policy, set standards, drive compliance and run committees and governance forums.
• Proven incident-response and crisis-management capability under pressure, with clarity on technical containment, communication and stakeholder coordination.
• Outstanding stakeholder-management skills - across senior Government functionaries, regulators, partners, vendors, auditors and senior leadership.
• Strong analytical orientation, with the ability to use threat intelligence, security telemetry and risk metrics to drive prioritisation and decisions.
• High personal integrity, ability to handle highly confidential and sensitive information with absolute discretion, and a strong public-service orientation.

Key Roles and Responsibilities

• The CISO will be responsible for the following, which is indicative and not exhaustive:
• Information-Security Strategy, Policy and Governance.
• Security Architecture and Engineering.
• Security Operations Centre and Threat Management.
• Identity, Access and Privilege Management.
• Regulatory Compliance and Data Protection.
• Cyber-Incident Response and Crisis Management.
• Security of Examination-Critical Systems.
• Third-Party Risk and Supply-Chain Security.
• Security Awareness, Culture and Capability Building.

For more information,please check the link: General Manager - Information Security (Chief Information Security Officer)

Tags jobs in delhi jobs in New Delhi jobs in non profit jobs in contractual jobs information security