Lead - Information Security

Role & responsibilities:

• Serve as the onsite cybersecurity lead and advisor for the client.
• Conduct security posture assessments, identify risks, and recommend appropriate controls.
• Guide the development and enforcement of security policies, standards, and procedures.
• Review and monitor client IT and security operations to ensure risk mitigation and compliance.
• Support the client during audits, compliance checks, and incident investigations.
• Advise on and oversee areas such as:

- Secure configurations and hardening

- Identity & Access Management (IAM)

- Vulnerability management & patch governance

- Network, endpoint, and cloud security

- Data protection & privacy controls

• Coordinate with the company's backend cybersecurity team for advanced needs such as:

- Threat intelligence and analysis

- Incident response and digital forensics

- Advanced penetration testing and vulnerability assessments

- Red/blue team exercises

• Prepare and present security reports, dashboards, and recommendations to client management.
• Act as a trusted security partner to both technical teams and business executives at the client site

Preferred candidate profile

• Bachelors degree in computer science.
• Relevant certifications such as CEH, CISSP, CISA, or ISO 27001 Lead Implementer.
• At least 5 years of experience in cybersecurity, regulatory compliance, or related roles.
• Strong knowledge of:
• Security frameworks (NIST CSF, ISO 27001, CIS Controls)
• Regulatory compliance (DPDP)
• Risk assessment and governance methodologies.
• Understanding of IT and security domains (networks, endpoints, cloud, applications).
• Hands-on experience with vulnerability management, penetration testing, IAM, and incident response.
• Strong communication and stakeholder management skills.

Preferred Skills:

• Ability to work independently onsite while effectively leveraging remote expert teams.
• Consultative mindset, able to translate technical risks into business impact and executive-level insights.
• Strong understanding of cybersecurity tools and frameworks.
• Analytical and problem-solving skills with attention to detail.