Information Security Manager

Information Security & GRC Manager

Key Responsibilities

• Lead Information Security Governance, ISMS, policies, and risk management programs.
• Drive compliance initiatives across ISO 27001, SOC 2, GDPR, HIPAA, DPDP, and other regulatory frameworks.
• Manage internal/external audits, customer security assessments, and remediation activities.
• Oversee enterprise risk assessments, third-party/vendor security reviews, and privacy compliance.
• Act as the primary contact for customer security questionnaires, audits, and assurance activities.
• Present security posture, risks, and compliance updates to leadership and stakeholders.
• Lead security awareness programs and foster a strong security culture.
• Mentor and manage the Information Security & GRC team.

Experience & Qualifications

• Bachelor's degree in IT, Computer Science, Engineering, or related field (Master's preferred).
• 12-15 years of experience in Information Security, GRC, Risk, Compliance, or Audit functions.
• Minimum 5 years of team management experience.
• Strong expertise in ISO 27001, Risk Management, Security Governance, Compliance, Privacy, Customer Assurance, and Third-Party Risk Management.

Certifications

• Required: ISO 27001 Lead Auditor or Lead Implementer
• Preferred: CISM, CISSP, or CISA