Lead - Information Security Governance & Compliance

Role & responsibilities

• Define and manage ISMS (Information Security Management System) Policies, manual, guidelines, procedures.
• Responsible for managing the IT security assessment and certifications like ISO 27001, TiSAX, SOC2 Type II, NIST, CMMC, Cyber Essentials, etc.,
• Having knowledge on Cybersecurity laws, IT Acts, Data Privacy Laws and law of the land primarily for India, Americas, Europe Geos
• Coordination with respective departments (Internal / Clients / Auditors etc.,) and prepare and conducting Internal/External audits.
• Educating & training employees on Cybersecurity.
• Responsible for review and responding to RFI/RFPs related to IT / Security related questions.

Preferred candidate profile

- Define, implement, and continuously improve the organizations ISMS policies, procedures, and governance framework aligned with ISO 27001 and other global standards
- Lead and manage end-to-end security certifications and audits (ISO 27001, SOC2, TISAX, CMMC, etc.), ensuring timely compliance and closure of findings
- Ensure multi-geo regulatory and data privacy compliance (India, US, Europe) by translating legal requirements into actionable security controls
- Coordinate with internal teams, clients, and auditors to drive audit readiness, risk mitigation, and compliance assurance across delivery units
- Drive security awareness, training programs, and support RFI/RFP responses, acting as a key interface for customer security assurance