Information Security Manager- group.one

Job summary:

As Information Security Manager at one.com / group.one, you will serve as a critical link between global security functions and local business units, ensuring seamless adoption of group-provided security services while driving stakeholder alignment. This role requires an outgoing professional with exceptional coordination skills, a deep understanding of Indian business culture, and the ability to support group-wide security objectives. You will work closely with internal teams, external auditors, and leadership to maintain arobust internal control frameworkthat meets the regulatory requirements aligned with industrys best practices.

Responsibilities:

• Stakeholder Management:

  Develop and maintain strong relationships with local business leaders, IT teams, and global stakeholders to align group security strategies with local business objectives.

• Security Governance:

  Support the implementation of group-provided security policies, standards, and frameworks, ensuring compliance with local regulations (e.g., DPDP Act) and global standards (e.g., ISO 27001, GDPR).

• Cultural Alignment:

  Leverage deep knowledge of Indian business culture to effectively communicate and integrate group security initiatives within local teams, fostering a collaborative group-wide security culture.

• Coordination:

  Facilitate coordination between group security teams and local business units, ensuring effective rollout of group-provided risk management, training & awareness, IT compliance, BCM, and incident management processes.

• Local Advocacy:

  Represent local business needs to group security teams, ensuring group-provided services are tailored to India-specific requirements.

• Incident Support:

  Support local incident response activities by adhering to group-aligned security incident management processes, ensuring effective communication and resolution.

• Reporting:

  Provide clear, concise updates to senior leadership on the adoption of group security initiatives, local compliance, incident status, and stakeholder feedback, bridging local and global perspectives.

Skills

• Cultural Competence:

  Strong understanding of Indian business practices, communication styles, and workplace dynamics, with proven ability to navigate multicultural environments.

• Stakeholder Engagement:

  Outgoing personality with a demonstrated ability to influence stakeholders and foster collaboration across diverse teams.

• Security Knowledge:

  Familiarity with Application security, security governance, compliance frameworks, and group-aligned incident management processes, with awareness of local and global regulations.

• Coordination Skills:

  Proven ability to manage cross-functional coordination, align diverse teams, and execute initiatives in a fast-paced environment.

• Communication:

  Excellent verbal and written communication skills in English.

Education and experience requirements:

• Bachelors degree in information security / computer science / information technology.
• 7-10 years in information security or related roles, with at least 3 years in a stakeholder-facing or coordination role. Experience in India with multinational organizations is highly desirable.
• Certifications (e.g., CISSP, CISM, CRISC) are preferred.