Manager - IT Security

Key Deliverables

Responsibilities

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with cross functional stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Requirements

• Expertise in QRadar, GTB DLP, CyberArk PAM, Wiz CNAPP, SentinelOne EDR, Qualys VA, and PT tools.
• Cloud security governance experience (AWS, Azure; GCP optional).
• Strong knowledge of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.
• Strategic mindset and strong stakeholder management.
• Proven team leadership and excellent communication.
• Strong documentation and reporting skills.