IT Infrastructure & Information Security Leader - Audit & Compliance Management

Description :

We are seeking a seasoned IT Infrastructure & Information Security Leader for a leading Market Research Company responsible for architecting, securing, and governing enterprise IT systems.

The role blends deep hands-on technical expertise with leadership in security governance, compliance, budgeting, and client audit readinessensuring a resilient, efficient, and fully compliant IT environment.

Key Responsibilities :

Infrastructure & Operations :

- Manage end-to-end Linux & Windows server environments and VMware virtualized infrastructure.

- Design and optimize on-prem + hybrid cloud architecture for performance, resilience, and cost efficiency.

- Administer multi-cloud platforms such as DigitalOcean, Linode, Azure SQL, etc.

Information Security & Governance (CISO Scope) :

- Define and enforce security policies, ISMS, risk management, DLP, and data classification.

- Ensure compliance with ISO 27001, GDPR, DPDPA, and other global standards.

- Drive incident response, security awareness, and forensic readiness.

Team Leadership & Escalation :

- Lead and mentor IT & InfoSec teams; serve as L3 escalation for infra/security issues.

- Drive RCA, preventive actions, and continuous improvement culture.

Budgeting & Procurement :

- Build and manage IT/security budgets, procurement, licensing, and vendor negotiations.

- Monitor infra/security spend and implement cost-optimization strategies.

Audit & Compliance Management :

- Lead internal and external audits (ISO, PCI, SOC 2, GDPR), ensuring evidence and closure.

- Handle client security reviews, SLAs, and data-processing compliance.

Database Management :

- Oversee SQL/database performance, backup, DR, and data protection compliance.

Network & Security :

- Design and maintain secure enterprise networks with firewalls, segmentation, and zero-trust controls.

- Manage Fortinet and other firewall platforms including VPN, IDS/IPS, and advanced policies.

Security Operations (SOC/SIEM) :

- Lead Wazuh-based SOC for monitoring, threat detection, investigation, and response.

- Implement FIM, vulnerability scanning, and compliance automation.

What We Offer :

- A strategic IT leadership role in an innovation-focused environment.

- A collaborative culture that encourages learning, growth, and ownership.

- An opportunity to build and scale IT and security functions within a progressive, growth-oriented organization.

Candidate Profile :

- Progressive experience in IT Infrastructure & Security.

- Experience working in a leadership/CISO role handling infra, InfoSec, and compliance.

- Linux & Windows Server administration expertise with RHCE and Microsoft certifications preferred.

- VMware-certified (VCP/VCAP or equivalent) with hands-on virtualization experience.

- ISO 27001 Lead Implementer/Auditor; CISM/CISSP highly preferred.

- Strong leadership, team management, and stakeholder coordination skills.

- Ability to balance security, operational efficiency, and cost optimization.

- Excellent communication skills for executive reporting and client-facing audits.

- Analytical, root-cause oriented problem solver with long-term solution focus.

- Effective vendor management and cross-functional collaboration abilities.

- Knowledge of GDPR, DPDPA, SOC 2, and related compliance frameworks.

- Wazuh Certified or equivalent SOC/SIEM platform proficiency.

- Strong networking and firewall skills across Fortinet, Cisco, and Palo Alto technologies SQL Server and database administration experience.

- Multi-cloud management exposure to platforms such as DigitalOcean, Linode, Azure SQL, etc.

WHY JOIN US?

- Play a key role in shaping and scaling IT and security for a rapidly expanding organization.

- High-impact leadership position with real autonomy and decision-making authority.

- Work with a trusted brand backed by decades of technical excellence and innovation.

- Be part of a dynamic, collaborative culture that values ownership, agility, and performance.

Qualification : Bachelors or Masters in Computer Science, IT, or Information Security.