SBI Group CISO Recruitment 2026

SBI Group CISO Recruitment 2026: Overview

State Bank of India (SBI) is engaging a Group Chief Information Security Officer (Group CISO) to lead cyber-security governance across the bank and its technology environment. This is a senior contractual leadership role handled by the bank's Central Recruitment & Promotion Department, with Mumbai or Navi Mumbai shown as the suggested base. The assignment covers strategy, regulatory alignment, incident readiness and oversight of security operations for a large financial institution. The bank may also use the officer's services at another SBI office, associate, subsidiary or organisation in India when operational needs demand it.

Service Conditions and Caveats

• Contract term: The initial engagement runs for three years and may be renewed for another two years on terms agreed with the bank. The complete engagement cannot go beyond five years.
• Early termination: Either side may end the contract by giving three months' notice or by paying or surrendering three months' compensation instead. The bank may apply the contractual-officer policy in force during the engagement.
• Posting flexibility: Mumbai or Navi Mumbai is only the suggested location. You can be posted or transferred to any SBI office in India, or deputed to an associate, subsidiary or another organisation.
• Performance review: Continuation, increments and the variable component depend on the bank's performance appraisal. Half-yearly reviews may be used to track delivery against the key result areas assigned after joining.
• Leave: The contractual officer can receive thirty days of leave in a financial year for genuine reasons. Intervening Sundays and holidays are not counted while calculating this leave.
• Shortlisting: Meeting the minimum requirements does not guarantee an interview call. The bank's committee can set screening parameters and call only the number of people it considers suitable.
• Fitness and conduct: Final engagement depends on being declared medically fit and complying with SBI's service and conduct rules. Character or antecedent issues can lead to rejection or later termination.
• Experience test: Only relevant full-time professional work is considered for the experience requirement. Teaching and training work does not count, and the original records can be checked before engagement.
• Communication: Interview advice and other calls are sent by email or placed on the SBI careers site. No paper call letter is promised, so your registered email should remain active.
• Legal venue: Any proceeding connected with this recruitment can be brought only before the courts, tribunals or forums having jurisdiction in Mumbai.

Application Submission Notes

Complete the form only through the specific SBI recruitment portal; the bank says that no hard copy of the application or supporting papers should be posted to its office. Keep the generated application and fee receipt for your records, and make sure the email address used for registration remains active until the result is declared. If you submit more than one form, SBI will retain only the last valid completed application.

The portal asks for a recent photograph, signature and supporting PDF records, along with the bank's biodata and CTC negotiation formats. The uploaded records must be clear and follow the size and format limits shown on the application page. Shortlisting is provisional until SBI checks the original information and records.

• Drive the bank's cyber-security strategy and regulatory compliance programme
• Protect information assets by setting and enforcing security policies
• Brief senior management and Board committees on cyber risks and controls
• Oversee security operations, threat monitoring, incident response and cyber-crisis planning
• Run assurance audits, vulnerability reviews, penetration tests and security exercises
• Coordinate with RBI, CERT-In, NCIIPC and other regulatory or intelligence agencies
• Embed security-by-design controls in cloud, AI, digital and infrastructure programmes
• Manage security metrics, awareness programmes and communication during cyber incidents