Senior Manager Information Security

Job Role: Senior Manager - GRC (Cybersecurity)
Lead and maintain ISO 27001, ISO 14001 and support SOC 2 and other compliance frameworks.
Drive information security risk assessments, risk treatment, control effectiveness, and compliance monitoring.
Lead internal, external, surveillance, customer, and third-party security audits and ensure timely closure of findings.
Manage customer security assessments, due diligence questionnaires, and contractual security requirements.
Govern Third-Party Risk Management (TPRM), including vendor security assessments, contractual controls, and remediation.
Provide governance oversight for SOC, SIEM, EDR, DLP, Vulnerability management and security monitoring.
Drive data protection and DLP governance, including information classification and prevention of data leakage.
Oversee asset inventory and security monitoring coverage for critical IT and cloud assets.
Govern VAPT, vulnerability remediation, access reviews, privileged access, and security control assessments.
Support cloud security and emerging technology/AI governance, including security and data protection risks.
Develop and maintain security policies, procedures, standards, controls, and management reporting.
Lead cybersecurity awareness and training programs across employees and stakeholders.
Support incident management, business continuity, disaster recovery, and security improvement initiatives.
Partner with IT, SOC, HR, Legal, Procurement, Business teams, customers, vendors, and auditors to strengthen the organization's overall security posture.

Work arrangement
Hybrid