Information Security Manager
Job Title: Cybersecurity Manager
Location: Bengaluru / Hybrid Department: Information Security
Role Overview
We are seeking an experienced Cybersecurity Manager to lead and mature enterprise security programs across governance, cyber risk management, compliance, cloud security, AI security governance, and certification initiatives.
This role will be responsible for cyber risk management, IT audits, vulnerability governance, certification ownership, and enterprise security programs across key standards including SOC 2 Type II, ISO 27001, PCI-DSS, and HIPAA.
The role will also lead AI risk management and Responsible AI initiatives to ensure secure adoption of emerging technologies.
Key Responsibilities
Security Strategy & Governance
Define and execute enterprise cybersecurity strategy aligned to business objectives and regulatory requirements
Establish security policies, standards, and governance frameworks
Drive adoption of security frameworks including NIST CSF, ISO 27001, and CIS Controls
Govern security operations from risk and governance perspective
Review security incidents, operational risks, trends, and management reporting
Support incident readiness and post-incident governance activities
Cyber Risk Management
Lead enterprise cyber risk management programs including risk identification, assessment, treatment, and reporting
Maintain risk registers and executive reporting
Integrate cyber risks across cloud, applications, AI systems, infrastructure, and third parties
IT Audits & Compliance Ownership
Own enterprise certification and audit programs including:
SOC 2 Type II
ISO 27001 / ISO 27701
PCI-DSS
HIPAA
Responsibilities include: Responsibilities include IT audits, certification readiness, evidence management, remediation tracking, and client assurance support.
Vulnerability Governance
Govern enterprise vulnerability management programs
Oversee VAPT activities and remediation tracking
Drive risk-based prioritization and exposure reduction initiatives
AI Risk Management & Responsible AI
Define AI security and AI risk management frameworks
Identify risks related to AI systems including data leakage, model manipulation, privacy, and bias risks
Drive Responsible AI governance and policy implementation
Support secure AI lifecycle initiatives
Security Architecture & Engineering Governance
Collaborate with IT and engineering teams on secure architecture initiatives
Promote Zero Trust, identity-first security, and secure SDLC practices
Vendor Risk Management & Security Awareness
Conduct vendor risk assessments and third-party reviews
Support supplier security governance and contractual security requirements
Lead enterprise awareness programs and phishing initiatives
Promote organization-wide security culture initiatives
Required Qualifications
Bachelor’s degree in Cybersecurity / IT / Engineering or related fields
8–12+ years cybersecurity experience
3–5 years in leadership roles
Experience in cyber risk, audits, certifications, cloud security, and governance programs
Experience supporting client assurance and regulatory initiatives
Preferred Certifications
CISSP | CISM | CISA | CRISC | CCSP | ISO 27001 Lead Implementer / Lead Auditor | SC-100 | AZ-500
Key Skills
Cyber Risk Management
IT Audit & Compliance (SOC2, ISO, PCI-DSS, HIPAA)
Vulnerability Governance & VAPT
Cloud Security Governance
AI Risk Management & Responsible AI
Security Governance
Vendor Risk Management
Leadership & Stakeholder Management
Note:
By submitting your application, you consent to being contacted by our Talent Acquisition team via phone call, email, SMS, WhatsApp, or other communication channels regarding your application and relevant career opportunities.