Information Security Manager - CyberArk/Qualys

Job Description :

- Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.

- Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).

- Oversee security risk assessments, audits, and remediation plans across IT and business units.

- Manage a team of security professionals; mentor, coach, and evaluate performance.

- Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.

- Lead incident response, RCA, and post-mortem reviews.

- Drive security awareness and training programs across the organization.

- Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills :

- Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.

- Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).

- Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.