About the Company :

A fast-growing technology organization delivering innovative digital solutions to global clients. The company is committed to maintaining the highest standards of information security, privacy, and compliance while fostering a culture of innovation, collaboration, and continuous improvement.

Job Summary :

We are seeking an experienced Information Security Manager to lead the organization's Information Security, Governance, Risk, and Compliance (GRC) initiatives. The ideal candidate will have extensive experience in security governance, regulatory compliance, audit management, risk assessment, and implementing enterprise-wide security frameworks to ensure adherence to global security and privacy standards.

Key Responsibilities :

- Lead and manage the organization's Information Security Management System (ISMS) and security governance framework.

- Plan and execute internal, external, customer, and certification audits.

- Drive ISO 27001, ISO 27701, and other security and privacy certification initiatives.

- Ensure compliance with GDPR, HIPAA, SSAE, DPA, and other regulatory and contractual requirements.

- Develop, review, and maintain security policies, standards, procedures, and governance documentation.

- Conduct security risk assessments, IT audits, vulnerability assessments, and compliance reviews.

- Manage customer security questionnaires, client security reviews, due diligence, and audit responses.

- Oversee Third-Party Risk Management (TPRM), Business Continuity Management (BCMS), and vendor security assessments.

- Collaborate with Engineering, DevOps, IT, Legal, HR, and business teams to implement security best practices.

- Monitor security incidents, drive corrective actions, and ensure continuous process improvement.

- Prepare security dashboards, compliance reports, and executive presentations for leadership.

Required Skills :

- Information Security Management System (ISMS)

- Governance, Risk & Compliance (GRC)

- Information Security Audits & Compliance Management

- ISO 27001 & ISO 27701

- GDPR, HIPAA, SSAE & DPA Compliance

- IT General Controls (ITGC)

- Third-Party Risk Management (TPRM)

- Business Continuity Management (BCMS)

- Security Governance & Risk Assessment

- Vulnerability Management

- Identity & Access Management (IAM)

- Cloud Security (AWS/Azure)

- Incident Response & Security Monitoring

- Security Policies, Standards & Documentation

- Customer Security Reviews & Audit Management

Preferred Certifications :

- CISSP

- CISM

- CCSP

- ISO 27001 Lead Auditor (LA)

- ISO 27001 Lead Implementer (LI)

- ISO 27701 Lead Auditor / Lead Implementer

- CISA or equivalent Information Security certification