Manager, Global IT Security Operations

Manager, Global IT Security Operations Location - Gurugram (Hybrid) The Manager, Global IT Security Risk Management is responsible for leading the operational management and continuous improvement of Lonza's information security risk management program.

About Lonza

• Lonza At Lonza, our people are our greatest strength.
• With 30+ sites across five continents, our globally connected teams work together every day to manufacture the medicines of tomorrow.
• Our core values of Collaboration, Accountability, Excellence, Passion and Integrity reflect who we are and how we work together.
• Everyone’s ideas, big or small, have the potential to improve millions of lives, and that’s the kind of work we want you to be part of.
• Innovation thrives when people from all backgrounds bring their unique perspectives to the table.
• At Lonza, we value diversity and are committed to creating an inclusive environment for all employees.
• If you’re ready to help turn our customers’ breakthrough ideas into viable therapies, we look forward to welcoming you on board.

Ready to shape the future of life sciences?

Apply now.

Responsibilities

• This role ensures cybersecurity and technology risks are identified, assessed, documented, monitored, and managed in alignment with business objectives, regulatory requirements, and organizational risk appetite.
• Reporting to the Global Head of IT Security & Compliance, the incumbent will partner with business leaders, IT teams, procurement, legal, quality, compliance, audit functions, customers, and external providers to strengthen security governance, enhance risk visibility, and drive a consistent enterprise-wide approach to cybersecurity risk management.
• Success in this role is demonstrated through improved risk governance, strengthened compliance posture, reduction of unmanaged risk exposure, and delivery of meaningful insights that enable informed business decision-making.
• You’ll Do Information Security Risk Management Lead and continuously improve the IT security risk management program.
• Conduct risk assessments, maintain the security risk register, and drive mitigation and remediation activities.
• Provide risk-based guidance to stakeholders and support risk acceptance decisions.
• Governance, Compliance & Audit Maintain security policies, standards, and risk management processes aligned with industry frameworks (e.g., ISO 27001, NIST).
• Support internal and external audits, compliance reviews, and remediation of findings.
• Ensure security requirements are embedded in business and technology initiatives.
• Third-Party Risk Management Manage the global third-party cybersecurity risk program.
• Assess security risks of vendors and service providers and oversee remediation of identified gaps.
• Partner with Procurement and business stakeholders to strengthen supply chain security.
• Customer Security Assurance Lead responses to customer security assessments, questionnaires, and due diligence requests.
• Coordinate with cross-functional teams to demonstrate compliance and security capabilities.
• Maintain customer assurance documentation and address evolving customer requirements.
• Reporting & Continuous Improvement Develop and report key risk, compliance, and security metrics.
• Facilitate governance reviews and risk reporting for leadership.
• Drive continuous improvement of cybersecurity governance, risk, and compliance processes.

Requirements

• What we are looking for Bachelor’s degree in Information Security, Computer Science, IT, Risk Management, or a related field.
• 8+ years of experience in cybersecurity risk management, governance, compliance, audit, or information security.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Experience managing security risk assessments, third-party risk, audits, and compliance activities.
• Excellent stakeholder management, communication, and influencing skills in a global environment.
• Proven ability to drive risk-based decisions, manage competing priorities, and deliver results collaboratively.

Preferred

• Knowledge of DLP, Privileged Access Management (PAM), and security governance practices is preferred.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Auditor/Implementer are advantageous.

Benefits

• An agile career and dynamic working culture.
• An inclusive and ethical workplace.
• Compensation programs that recognize high performance.
• A variety of benefits dependent on role and location.