The record
The appointment was disclosed by IDFC FIRST Bank in a stock-exchange filing on 30 October 2026. Thaker takes over the bank’s cybersecurity function at a time when the CISO role in Indian banking carries direct regulatory weight — banks report cyber incidents to the RBI, run continuous security operations, and face board-level scrutiny of their defences.
Thaker was already inside the building: he served as Deputy CISO at IDFC FIRST Bank, leading its cybersecurity transformation initiatives. Before that, he was Executive Director, Enterprise Security & Resilience at GXS Bank in Singapore and held a security leadership role with the Monetary Authority of Singapore (MAS). In total, he brings nearly two decades of cybersecurity experience across banking, regulatory institutions and consulting.
Outgoing CISO Nitin Chauhan’s resignation was accepted alongside the appointment; he leaves on 23 April 2027, giving the bank a six-month handover window — unusually long, and a sign the transition is being managed rather than rushed.
Why this move matters
Internal CISO promotions are the quiet pattern in Indian banking security: the deputy already knows the bank’s stack, its regulators and its incident history. An external hire buys fresh perspective but costs months of onboarding; Thaker’s elevation buys continuity at a moment when digital banking fraud and phishing volumes keep rising. The long handover to April 2027 also matters — it avoids the single-point-of-failure risk of an abrupt CISO exit.
What this signals — analysis
For boards, the lesson is succession depth in security leadership. A deputy who can step up is not an accident — it is the product of deliberately building a second line in the security function. Banks that treat the CISO as a single hire, not a bench, will keep paying for transitions in risk.
For context, see the Leadership Moves archive for other verified leadership changes.