Lead Information Security and Data Privacy US

As a Lead Information Security & Privacy, you will function as an individual contributor tasked with

steering our GRC objectives, with a specific focus on leading the onshore implementation of ISO 27001

and ISO 27701 management systems. This role requires a proactive approach to threat mitigation and a

deep commitment to fostering a culture of security and privacy awareness throughout the organization.

Key Responsibilities:

• Onshore ISO Implementation Leadership: Drive the onshore implementation and

operationalization of ISO 27001 and ISO 27701 management systems, managing the execution of

implementation phases across business functions, ensuring all processes align with

organizational security and privacy objectives.

• Stakeholder Collaboration: Collaborate closely with US-based stakeholders, including function

owners (IT, HR, Sales, Legal), to align onshore security and privacy practices with organizational

objectives, requiring significant overlap with US business hours.

• Compliance & Metrics Monitoring: Establish and maintain rigorous documentation and

compliance monitoring for ISO standards, facilitating internal/external assessments,

management reviews, and timely resolution of non-conformities.

• Strategic Risk Assessment: Perform deep-dive security and privacy risk assessments on critical

data assets and digital estates, identifying vulnerabilities and architecting advanced technical

controls to mitigate threats.

• Regulatory Compliance: Ensure adherence to global data protection laws and privacy

frameworks by architecting and sustaining rigorous controls designed to protect personal data.

• Audit Management: Spearhead the end-to-end lifecycle of internal and external security audits,

driving readiness, coordination, and remediation to ensure continuous compliance with

standards such as ISO 27001, SOC 2, and other relevant regulatory frameworks.

• Strategic Communication: Provide communication regarding security objectives, strategic

initiatives, and organizational programs to both departmental leadership and the broader

workforce.

• Incident Response: Direct investigations into security incidents, maintaining thorough

documentation of findings and facilitating the expedient resolution and remediation of issues in

partnership with stakeholders.

Required Qualifications, Skills, and Competencies:

• Bachelor's degree in Computer Science, Information Systems, or an allied discipline.
• 7+ years of experience in the domains of information security and privacy.
• Proficiency or professional certification in frameworks such as ISO 27001, ISO 27701, or

equivalent cybersecurity standards.

• Familiarity in risk concepts for AI deployments and Large Language Models (LLMs) will be an

advantage.

• Must be available to work in shifts with significant overlap with US business hours to support

onshore implementation and stakeholder coordination from India.

Note: The title will be determined based on aspects such as years of relevant experience, skills, type of

responsibilities handled, etc.