Role Summary:
Khaitan & Co. is seeking a seasoned and strategic Head of Information Security to lead and mature its information security program. This role will be responsible for developing, implementing, and managing comprehensive security strategies to protect the firm's sensitive client data, intellectual property, and internal systems from cyber threats. The ideal candidate will have a strong understanding of the legal industry's unique security challenges and regulatory requirements.

Key Responsibilities:

• Develop and execute a holistic information security strategy aligned with the firm's business objectives and risk appetite.
• Oversee the implementation and management of security controls, policies, and procedures across all firm systems and operations.
• Lead and manage the information security team, fostering a culture of security awareness and best practices.
• Conduct regular risk assessments, vulnerability scans, and penetration testing to identify and mitigate security weaknesses.
• Develop and maintain an effective incident response plan, including preparedness, detection, containment, eradication, and recovery.
• Ensure compliance with relevant legal, regulatory, and industry standards (e.g., GDPR, data privacy laws, ISO 27001).
• Manage relationships with third-party security vendors and service providers.
• Provide security awareness training to all employees.
• Stay abreast of emerging threats, vulnerabilities, and security technologies.