Information Security Manager

Role Overview

The Manager will be responsible for driving the organizations information security strategy, governance, and compliance programs. This role ensures that security policies, processes, and controls are in place to protect critical business systems, data, and infrastructure against evolving cyber threats. The incumbent will lead cross-functional teams, coordinate with business units, and collaborate with external partners to strengthen the overall security posture of the organization.

Key Responsibilities

Strategic Leadership

• Define and implement the organization’s Information Security strategy aligned with business objectives and regulatory requirements.
• Establish and maintain security governance, frameworks, and policies (ISO 27001, NIST, CIS, GDPR, etc.).
• Develop long-term security roadmaps covering risk management, compliance, and incident response.

Risk & Compliance Management

• Conduct enterprise-wide risk assessments and drive mitigation measures.
• Ensure compliance with internal security standards and external audits (ISO, SOC2, GDPR, CERT-In, etc.).
• Manage ISMS implementation and periodic reviews.

Security Operations

• Oversee Security Operations Center (SOC), endpoint security, network defense, data protection, and vulnerability management.
• Lead incident detection, response, and recovery activities.
• Implement and monitor Data Loss Prevention (DLP), Identity & Access Management (IAM), and Zero Trust models.

Technology & Process Enablement

• Evaluate, implement, and optimize security tools (SIEM, SOAR, EDR/XDR, Cloud Security, IAM).
• Drive secure adoption of cloud, mobility, and digital platforms.
• Ensure secure software development lifecycle (DevSecOps).

Awareness & Training

• Build security awareness programs for employees, contractors, and leadership.
• Conduct phishing simulations and regular cyber drills.
• Leadership & Stakeholder Management
• Lead and mentor a team of security professionals.
• Collaborate with IT, Legal, HR, and Business Leaders to embed security into business processes.
• Act as the primary contact for security incidents and regulatory interactions.