Lead - Information Security & Compliance

About the role

We are seeking a proactive Lead - Information Security & Compliance to own our security strategy, ISO 27001 and SOC 2 programs, internal security audits, policies, risk management, SOP adherence, and responses to customer security requirements. The role also provides governance and oversight for organizational IT operations.

What you'll do

• Information Security, Risk & Compliance Leadership (ISO 27001 / SOC 2)
• Own the design, implementation, operation, and continuous improvement of the Information Security Management System (ISMS), ISO 27001 controls
• Plan and lead internal security audits, ISO 27001 and SOC 2 assessments, surveillance and external audits; coordinate auditors, evidence collection, corrective actions
• Maintain the security risk register and drive periodic risk assessments, control testing, gap analyses, remediation plans, exception reviews
• Own and maintain security policies, standards, SOPs, registers, and supporting documentation; assign control owners, train relevant teams, monitor adherence

What you need

• 4–7 yrs of experience
• Compliance
• Incident response
• Vulnerability assessment
• SIEM
• ISO 27001
• CISM
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISSP
• Cloud security
• EDR
• SOP writing
• AWS
• GCP

What you get

• ₹20 L–₹30 L a year