Junior Information Security Officer

Jio Insurance Broking Limited · India

About the Role:

We are seeking a proactive and hands-on Junior CISO to help drive and implement our information security roadmap at Jio Insurance Broking Limited. This role is suited for someone with a solid foundation in cybersecurity, regulatory compliance, and cloud security, ready to take ownership of security practices under the guidance of senior leadership. You will collaborate closely with engineering, IT, legal, and business teams to protect our platforms, customer data, and insurance partner integrations.

Key Responsibilities:

• Support the development, rollout, and execution of JioInsure’s overarching cybersecurity and data privacy strategy.
• Monitor and enforce security controls across multi-cloud infrastructure (AWS, Azure, GCP), microservices, custom APIs, and internal tools.
• Establish and maintain information security policies, SOPs, and governance frameworks, ensuring strict enforcement and segregation of duties.
• Oversee Third-Party Risk Management (TPRM) for vendor, insurer, and POSP/partner API integrations.
• Track, analyze, and mitigate vulnerabilities, security incidents, and threat intelligence alerts with timely resolution.
• Enforce Identity and Access Management (IAM), Zero-Trust frameworks, and endpoint security across all user environments.
• Drive compliance readiness for insurance-specific regulations (IRDAI Cybersecurity Guidelines, DPDP Act, ISO 27001).
• Partner with DevOps and Engineering teams to integrate DevSecOps practices and secure coding throughout the SDLC.
• Coordinate external security audits, VAPT (Vulnerability Assessment and Penetration Testing), and regulatory filings.
• Serve as the primary security point of contact for internal queries, external auditors, and regulatory assessments.

Required Skills & Experience

• 3-4 years of experience in cybersecurity, information security, or infrastructure security roles.
• Strong understanding of network, cloud, and API security principles.
• Familiarity with OWASP top 10, SIEM tools, IAM systems, and endpoint security practices.
• Experience managing or reviewing information security policies with a maker-checker approach.
• Exposure to regulatory frameworks relevant to finance/insurance (IRDAI, ISO 27001, GDPR, etc).
• Excellent coordination, communication, and problem-solving skills.

Preferred Qualifications

• Bachelor's degree in Computer Science, IT, or a related field.
• Relevant certifications: CEH, Security+, ISO 27001 Lead Implementer/Auditor, Azure/AWS Security.
• Prior experience in the insurance domain.