Information Security Manager

Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022 ISO 27701:2019 DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Requirements:

• Experience: 10+ years (with a minimum of 3 years in leadership roles).
• Qualification: Bachelor's in IT/Computer Science.
• Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA, and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT& CK, NIST CSF, CIS Controls, OWASP Top 10

Soft Skills:

• Strategic thinking.
• Stakeholder management.
• Team leadership.
• Excellent communication.