Information Security-IT

Role Overview:

Candidate will be responsible for driving the organizations information security strategy, governance, and compliance programs. This role ensures that security policies, processes, and controls are in place to protect critical business systems, data, and infrastructure against evolving cyber threats. The incumbent will lead cross-functional teams, coordinate with business units, and collaborate with external partners to strengthen the overall security posture of the organization.

Key Responsibilities:

Strategic Leadership

• Define and implement the organization’s Information Security strategy aligned with business objectives and regulatory requirements.
• Establish and maintain security governance, frameworks, and policies (ISO 27001, NIST, CIS, GDPR, etc.).
• Develop long-term security roadmaps covering risk management, compliance, and incident response.

Risk & Compliance Management

• Conduct enterprise-wide risk assessments and drive mitigation measures.
• Ensure compliance with internal security standards and external audits (ISO, SOC2, GDPR, CERT-In, etc.).
• Manage ISMS implementation and periodic reviews.

Security Operations

• Oversee Security Operations Center (SOC), endpoint security, network defense, data protection, and vulnerability management.
• Lead incident detection, response, and recovery activities.
• Implement and monitor Data Loss Prevention (DLP), Identity & Access Management (IAM), and Zero Trust models.

Technology & Process Enablement

• Evaluate, implement, and optimize security tools (SIEM, SOAR, EDR/XDR, Cloud Security, IAM).
• Drive secure adoption of cloud, mobility, and digital platforms.
• Ensure secure software development lifecycle (DevSecOps).

Awareness & Training

• Build security awareness programs for employees, contractors, and leadership.
• Conduct phishing simulations and regular cyber drills.
• Leadership & Stakeholder Management
• Lead and mentor a team of security professionals.
• Collaborate with IT, Legal, HR, and Business Leaders to embed security into business processes.
• Act as the primary contact for security incidents and regulatory interactions.

Qualifications & Experience

• Bachelor’s / Master’s degree in Computer Science, Information Security, or related field.
• 18-25 years of experience in IT Security, with at least 5+ years in a leadership role.
• Strong expertise in risk management, compliance, and governance frameworks (ISO 27001, NIST, PCI-DSS, GDPR, etc.).
• Proven experience in SOC management, cloud security, endpoint protection, IAM, and incident response.
• Hands-on knowledge of cybersecurity tools & technologies (SIEM, SOAR, EDR, DLP, CASB, etc.).
• Certifications such as CISSP, CISM, CISA, ISO 27001 Lead Implementer/Auditor, CEH will be highly preferred.

Key Skills

• Strong leadership, communication, and stakeholder management skills.
• Ability to align security initiatives with business priorities.
• Analytical and problem-solving mindset with decision-making capability.
• Proven ability to handle regulatory audits and external security assessments.
• Adaptability to manage security across IT, OT, and cloud environments.