Manager – Information Security (CISM, ISO 27001 LA)

Position: Manager – Information Security

Experience: 10+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities:

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills:

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.Soft Skills:?
• Strategic thinking? Stakeholder management? Team leadership?
• Excellent communication

mail updated resume with salary details-

email: etalenthire@ gmail.com

satish: 88O2749743

website: www.glansolutions.com

Google search: Glan management Consultancy

Job Type: Full-time

Pay: ₹1,584,631.92 - ₹3,042,980.63 per year

Ability to commute/relocate:

• Gurgaon, Haryana: Reliably commute or planning to relocate before starting work (Preferred)

Application Question(s):

• How Much experience you have in design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs ?
• How Much Experience you have to Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In) ?
• Which Certification you have of followings- CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor ?
• How Much Experience you have in cloud security governance (Preferred on AWS and Azure; Good to have GCP) ?
• How Much Experience you have in Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10 ?
• How much Experience you have in IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP ?
• Current Annual CTC ?
• Expected CTC ?
• Notice period (If serving then LWD) ?
• Current Location ?
• Would you be comfortable with office job in Gurgaon ?

Experience:

• Information security: 10 years (Preferred)

Work Location: In person