Associate Vice President - Information Security

Cybersecurity Advisory & Consulting:

- Advise enterprise clients on building and scaling cybersecurity capabilities for their GCCs.

- Define security strategies, operating models, governance frameworks, and transformation roadmaps.

- Conduct security maturity assessments, risk reviews, and gap analyses; recommend actionable improvement plans.

- Support client workshops, executive briefings, security assessments, and transformation initiatives.

- Provide guidance on cloud security, IAM, data protection, Zero Trust, DevSecOps, and security architecture.

Governance, Risk & Compliance:

- Help clients establish security policies, standards, controls, and governance frameworks.

- Advise on compliance programs aligned to ISO 27001, SOC 2, NIST CSF, GDPR, CIS Controls, and industry requirements.

- Support security audits, risk assessments, third-party risk management, and compliance initiatives.

Customer Engagement & Business Enablement:

- Build trusted relationships with customer CISOs, CIOs, and technology leadership teams.

- Support RFPs, customer due diligence, security questionnaires, and solution discussions.

- Partner with consulting, technology, and delivery teams to deliver security solutions for clients.

- Represent the company as a cybersecurity thought leader in customer and industry forums.

Company Security Leadership:

- Drive company's internal security governance, policies, risk management, and compliance initiatives.

- Strengthen security practices through continuous improvement, awareness, and operational excellence.

- Establish security metrics and reporting for leadership visibility.

Team & Capability Development:

- Build and mentor cybersecurity advisory teams and capabilities.

- Develop security frameworks, methodologies, and reusable consulting assets.

- Drive a culture of collaboration, innovation, and security excellence.

Qualifications & Experience:

- Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field; Master's degree preferred.

- 18+ years of experience in cybersecurity, information security, cyber risk management, or security consulting.

- 8+ years of experience in cybersecurity advisory, consulting, or enterprise security leadership roles.

- Proven experience advising CIOs, CISOs, and senior technology leaders on security strategy and transformation.

- Experience designing security operating models, governance frameworks, and security roadmaps for large enterprises.

- Strong experience across cloud security, risk management, compliance, security architecture, and cyber resilience.

- Experience working with global enterprises, consulting firms, or technology organizations.

Skills & Expertise:

- Strong knowledge of security frameworks including ISO 27001, NIST CSF, SOC 2, CIS Controls, and Zero Trust.

- Expertise in cybersecurity governance, cloud security, IAM, data protection, application security, and security operations.

- Strong consulting, stakeholder management, and executive communication skills.

- Ability to translate cybersecurity strategy into practical business outcomes.

- Strong analytical, strategic planning, and problem-solving capabilities.