About the role
Responsibilities:
- Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
- Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022 ISO 27701:2019 DPDPA, IT Act, CERT-In).
- Oversee security risk assessments, audits, and remediation plans across IT and business units.
- Manage a team of security professionals; mentor, coach, and evaluate performance.
- Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
- Lead incident response, RCA, and post-mortem reviews.
- Drive security awareness and training programs across the organization.
- Manage security budgets, vendor relationships, and contract negotiations.
Requirements:
- Experience: 10+ years (with a minimum of 3 years in leadership roles).
- Qualification: Bachelor's in IT/Computer Science.
- Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor.
Technical Skills:
- Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA, and other PT tools.
- Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
- Experience of MITRE ATT& CK, NIST CSF, CIS Controls, OWASP Top 10
Soft Skills:
- Strategic thinking.
- Stakeholder management.
- Team leadership.
- Excellent communication.