InfoSec Manager

About the role

We are looking for an InfoSec Manager who will run the company’s day-to-day Governance, Risk, and Compliance (GRC) activities under GDS, including security documentation, client security reviews, enterprise InfoSec processes, certifications, privacy requirements, and security readiness.

What you'll do

• Own the full client-facing InfoSec process from initial security request through completion and approval
• Manage enterprise security questionnaires, vendor assessments, compliance forms, procurement security documents, evidence collection, and follow-up actions
• Drive new ISO readiness , including coordinating evidence, controls, audit preparation, remediation activities, and maintaining the ISMS on a day-to-day basis
• Own operational GDPR and data protection activities , including DPAs, DPIAs, privacy/security assessments
• Maintain all company security materials, including trust page content, data-room documents, policies, procedures, certifications, architecture diagrams

What you need

• Incident response
• Vulnerability assessment
• ISO 27001
• Cloud security
• CISM
• Compliance
• Any graduate

Good to have

• Data privacy
• GCP
• Travel booking