InfoSec Manager

Role Summary

We are seeking an experienced Information Security & Risk Management Lead to drive the organization's cybersecurity, governance, risk, and compliance initiatives. The role will support the CISO in managing the Information Security Management System (ISMS), regulatory compliance, risk management, security operations, audits, and business continuity programs while ensuring a strong security posture across the enterprise.

Key Responsibilities

Governance, Risk & Compliance

• Support the CISO in developing and implementing enterprise-wide information security and risk management programs.
• Manage and maintain ISMS policies, standards, procedures, and compliance frameworks.
• Drive risk assessments, RBAC governance, Third-Party Risk Management (TPRM), and risk treatment plans.
• Ensure compliance with ISO 27001, ISO 27701, ISO 42001, SOC2, GDPR, DPDP, ISO 22301, and other regulatory requirements.
• Lead internal and external audits, compliance reviews, and remediation activities.

Security Operations & Incident Management

• Oversee security incident response, investigation, remediation, and reporting.
• Manage vulnerability management, threat monitoring, ransomware preparedness, and security testing programs.
• Drive change management, exception management, and security governance processes.
• Monitor Email DLP, dark web exposure, social media threats, and platform security compliance.

Security Assessments & Technology Governance

• Conduct security reviews across applications, infrastructure, cloud, and network environments.
• Lead VAPT, Red Teaming, SAST, SCA, code reviews, and security architecture assessments.
• Review firewall configurations, Active Directory security, server hardening, network devices, and CIS benchmark compliance.
• Provide security guidance for technology projects and product engineering teams.

Business Continuity & Stakeholder Management

• Oversee Disaster Recovery (DR), Business Continuity Planning (BCP), and Work-From-Home security frameworks.
• Collaborate with IT, Legal, Audit, HR, Compliance, and business stakeholders to strengthen security controls.
• Manage security vendors, service providers, and regulatory interactions.
• Define and report KPIs, risk metrics, and security dashboards to leadership.

Required Experience & Qualifications

• 10+ years of Information Security experience with at least 8 years in leadership roles.
• Strong experience in Information Security Governance, Risk Management, Compliance, and Security Operations.
• Banking, BFSI, or Financial Services domain experience preferred.
• Hands-on experience in VAPT, Incident Response, Security Audits, Risk Assessments, DR/BCP, and Security Architecture.
• Strong knowledge of ISO 27001/27701/42001, SOC2, GDPR, DPDP, COBIT, NIST, and ITIL frameworks.
• Excellent stakeholder management, leadership, communication, and program management skills.

Preferred Certifications

• CISSP
• CISM
• CISA
• ISO 27001 Lead Auditor/Lead Implementer
• ISO 27701 Lead Auditor
• ISO 22301 Lead Auditor
• SOC2 / GDPR / DPDP related certifications