Job Title: CISO
Location: Bangalore (On-site; full-time)
About Locus
Battle-tested in 350+ deployments across 30+ countries, Locus is an agentic Transportation Management System for all-mile, all-channel, trusted by enterprises like Unilever, Nestlé, and Siam Makro.
The platform unifies orders, capacity, and carrier networks into one living plan, aligning planning, execution, and settlement so promises become proof. AI co-pilots with guardrails surface risk early and recommend the next best move to protect SLAs and reduce empty miles.
In 2025, Locus joined the Ingka Group (IKEA Retail) family, marking a major milestone in our journey. Backed by the scale and strength of IKEA, we continue to operate independently while accelerating our mission to make global supply chains faster, smarter, and more sustainable.
Our Journey and Impact
Since 2015, Locus has been on a mission to make logistics decision-making intelligent, sustainable, and real-world ready. Our platform has powered billions of deliveries across 30+ countries for global enterprises, driving measurable impact in cost savings, carbon reduction, and SLA performance. With the strength of the IKEA ecosystem behind us, we’re scaling that impact even further.
Our Global Footprint
Headquartered in Bangalore, with teams across the U.S., U.K., UAE, and Southeast Asia, Locus brings together 170 + engineers, designers, and problem-solvers united by a single goal: to reinvent how the world moves goods.
Traits We Value
We look for people who are:
● Global in mindset: curious about diverse markets and ideas.
● Unrelenting in drive: energized by complex challenges.
● Intelligent in approach: analytical, creative, and thoughtful.
● Dynamic in execution: adaptive and decisive in fast-moving contexts.
● Exact in craft: detail-oriented and committed to excellence.
Role Description
Location: Bangalore, India (on-site)
As the CISO, you will be responsible for developing and implementing an organization-wide information security strategy and framework for our B2B SaaS platform, including securing our multi-tenant architecture. You will lead a team of security professionals and work closely with other stakeholders to protect the organization's information assets from security threats and ensure compliance with applicable regulations and industry best practices.
Key Responsibilities:
Security Strategy & Governance: Develop and implement a comprehensive information security strategy and governance framework - policies, procedures, standards, and guidelines, aligned with the organization's goals and current and emerging security risks.
Risk Management & Security Operations: Identify, assess, and manage information security risks across the organization. Oversee day-to-day security operations, including incident response, vulnerability management, threat intelligence, security monitoring, and access control.
Security Architecture & Compliance: Collaborate with IT and engineering teams to maintain a secure technology infrastructure, and provide guidance on security requirements for new systems and applications. Monitor and enforce compliance with security policies and regulations, and conduct periodic security audits to close compliance gaps.
Incident Response: Lead the response to security incidents investigation, containment, coordination with internal teams and external stakeholders, and remediation to prevent recurrence.
Vendor and Third-Party Risk Management: Establish and maintain a vendor and third-party risk management program to assess and monitor the security posture of external partners and suppliers.
Security Awareness, Metrics & Reporting: Develop and deliver security awareness and training programs. Define and track key security metrics, and present regular reports on the organization's security posture to executive management and the board.
Qualifications and Requirements:
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
- Professional certifications such as CISSP, CISM, or equivalent.
- Proven experience (typically 10+ years) in information security management, including hands-on experience in security operations, risk management, and compliance.
- Must have prior experience as a security leader at a B2B SaaS or multi-tenant cloud platform company, with direct ownership of enterprise customer security requirements (SOC 2, client security audits, contractual SLAs).
- Strong knowledge of information security principles, standards, frameworks (e.g., ISO 27001, NIST Cybersecurity Framework), and regulations (e.g., GDPR, CCPA).
- Familiarity with security technologies such as firewalls, intrusion detection/prevention systems, SIEM, and endpoint protection.
- Excellent leadership and team management skills, with strong communication and presentation abilities to articulate complex security concepts to technical and non-technical stakeholders.
- Analytical mindset and problem-solving skills, with the ability to adapt to a fast-paced, evolving security landscape.
What you should look forward to:
The opportunity to have a strategic impact on the organization’s customer experience and overall success.
You get to establish yourself as a thought leader in the logistics industry and participate in industry conference and networking events
Autonomy to make key decisions making and influencing key business outcomes.
What We Offer
Join Locus and become part of a visionary team that is redefining logistics through innovation and smart distribution. We provide competitive compensation, comprehensive benefits, and a collaborative environment where your expertise will drive both your growth and that of the organization.
Locus is an equal opportunity employer dedicated to creating a diverse and inclusive workplace.