Manager - Information Security

As the Manager of Information Security at Easebuzz Private Limited, your role involves overseeing the development, implementation, and management of the organization's information security program to ensure the confidentiality, integrity, and availability of corporate data and IT systems, protecting them from cyber threats and vulnerabilities. You will collaborate with various teams to establish and enforce security policies, conduct risk assessments, and lead incident response efforts. **Key Responsibilities:** - Lead the creation of security awareness programs for employees to foster a security-conscious culture. - Maintain and report on the status of the organization's security posture to leadership. - Conduct regular risk assessments to identify vulnerabilities and threats to critical systems and data. - Evaluate security risks associated with new projects, third-party vendors, and technologies. - Prioritize and recommend security measures to mitigate identified risks. - Perform security audits and assessments to ensure compliance with regulatory requirements. - Lead the response to security incidents, including identification, containment, eradication, recovery, and post-incident analysis. - Develop and maintain incident response plans, conduct tabletop exercises, and ensure effective communication during a crisis. - Collaborate with legal, communications, and management teams during and after incidents. - Oversee the day-to-day operations of security technologies and tools (e.g., SIEM, firewalls, endpoint security). - Ensure continuous monitoring of security events and threats, performing analysis and response as needed. - Maintain and optimize vulnerability management programs, including patching and remediation efforts. - Foster a collaborative and effective security team, ensuring appropriate skill sets and training programs. - Integrate security into all stages of system development and operations. - Ensure compliance with relevant legal, regulatory, and industry standards for data protection and cybersecurity. - Maintain documentation for audits, certifications, and external assessments. - Stay current on evolving security threats, vulnerabilities, and technologies. - Continuously evaluate and improve security processes, tools, and policies. - Participate in industry forums, conferences, and professional groups to enhance knowledge and best practices. **Required Qualifications:** - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent work experience). - 3-5 years of experience in information security. - Hands-on experience with security tools and technologies (e.g., SIEM, firewalls, intrusion detection/prevention systems). - Strong understanding of risk management and incident response practices. - Proven ability to manage and lead security teams in a dynamic, fast-paced environment. - Strong communication skills, both written and verbal. **Preferred Qualifications:** - Security certifications such as ISO27001 Lead Auditor or CISA. - Experience with cloud security and securing cloud infrastructures (AWS). - Knowledge of secure software development practices and DevSecOps. - Experience in vulnerability management and penetration testing.,