Infosec

Job Summary

We are looking for an experienced Information Security Lead to own and strengthen the organization's information security, risk, compliance, and data protection initiatives. The role will work closely with Engineering, IT, Product, HR, and leadership teams to ensure a strong security posture across applications, infrastructure, processes, and people.

Key Responsibilities

• Lead and manage the organization's overall Information Security program.
• Develop, implement, and maintain security policies, standards, procedures, and controls.
• Drive ISO 27001 compliance, audits, and continuous improvement initiatives.
• Manage risk assessments, vulnerability assessments, penetration testing, and security audits.
• Establish and monitor security controls across cloud infrastructure, applications, endpoints, networks, and data.
• Lead Security Incident Response, investigation, and remediation activities.
• Own Business Continuity & Disaster Recovery (BCP/DR) planning, testing, and improvements.
• Ensure compliance with applicable data protection and privacy regulations, including DPDP requirements.
• Conduct security reviews of applications, APIs, vendors, and third-party integrations.
• Manage Third-Party/Vendor Risk Management and security due diligence.
• Define and track security KPIs, KRIs, risks, and remediation plans.
• Conduct security awareness and information security training for employees.
• Work with engineering teams on secure SDLC, DevSecOps, application security, and cloud security practices.
• Coordinate with external auditors, customers, partners, and regulatory stakeholders on security requirements.
• Stay updated on emerging security threats, vulnerabilities, and industry best practices.
  
  

Required Skills & Experience

• 7–10 years of experience in Information Security / Cybersecurity / GRC.
• Strong understanding of ISO 27001, SOC 2, risk management, and security controls.
• Hands-on experience with VAPT, vulnerability management, incident response, and security audits.
• Good understanding of cloud security, preferably AWS/Azure/GCP.
• Knowledge of network security, IAM, endpoint security, encryption, SIEM, and logging/monitoring.
• Understanding of secure SDLC, OWASP, API security, and DevSecOps.
• Experience managing security compliance and customer security assessments.
• Strong knowledge of Business Continuity and Disaster Recovery.
• Excellent communication, documentation, stakeholder-management, and leadership skills.
  
  

Preferred Certifications

• CISSP
• CISM
• ISO 27001 Lead Auditor / Lead Implementer
• CRISC / CISA
• Cloud security certifications are an added advantage.
  
  

Key Success Metrics

• Security and compliance audit readiness
• Reduction in security risks and vulnerabilities
• Timely closure of security findings
• Incident detection and response effectiveness
• ISO 27001 / SOC 2 compliance
• Security awareness and policy adoption
• Third-party security risk management