Information Security Manager

Information Security Manager
Experience: 15–16 Years
Location: Bengaluru, India
Function: Information Security
Industry Preference: Legal Services / Professional Services / Consulting
The Information Security Manager will operate within the Information Security function and will be responsible for driving the execution, governance, and reporting of key cybersecurity initiatives across the firm. The role will ensure that security programs aligned to Risk Management, Business Continuity, Disaster Recovery, GRC, and Cloud Security are executed effectively and tracked through a structured governance framework.
The individual will act as a central coordination point between Information Security, Technology, Risk, Compliance, and business stakeholders, ensuring that cybersecurity initiatives are delivered on time, within scope, and aligned with regulatory and client expectations.
Key Responsibilities
1. Security Program Governance
Establish and manage the Information Security governance framework.
Track and report progress of security initiatives, remediation programs, and regulatory projects.
Maintain program dashboards, risk registers, and executive reporting for the leadership team.
Conduct monthly governance reviews with security leadership and the DIG office.
2. Risk & Compliance Program Management
Coordinate enterprise risk assessments and security risk remediation programs.
Track closure of audit observations, risk findings, and compliance gaps.
Work closely with the GRC team on policy implementation and regulatory compliance initiatives.
3. Business Continuity & Disaster Recovery Programs
Manage the BCP/DR program lifecycle, including:
Business Impact Analysis (BIA)
Risk assessments
DR testing exercises
Tabletop simulations
Track action items arising from BCP/DR drills and resilience programs.
4. Cloud Security Initiatives
Coordinate security initiatives across cloud platforms, including AWS, Azure, and GCP.
Track implementation of cloud security controls, architecture reviews, and remediation programs.
Work with cloud engineering teams to ensure security alignment.
5. Stakeholder Management
Act as a bridge between the CISO office, IT teams, business functions, and external vendors.
Manage cross-functional dependencies for security initiatives.
Provide executive-level reporting and program updates to leadership committees.
6. Metrics & Reporting
Develop security KPIs and program maturity dashboards.
Maintain the security roadmap and transformation tracking.
Produce quarterly board-level reports on cybersecurity initiatives.
Required Skills & Experience
Experience
15–16 years of total experience, with at least 8–10 years in PMO, program management, or information security management roles.
Experience managing enterprise cybersecurity or technology transformation programs.
Domain Knowledge
Strong understanding of:
Information Security Governance
Enterprise Risk Assessment
Business Continuity & Disaster Recovery
GRC frameworks
Cloud security fundamentals
Familiarity with standards such as:
ISO 27001
NIST
SOC 2
Regulatory compliance frameworks
Preferred Certifications
One or more of the following preferred:
PMP / PRINCE2
CISA
CRISC
CISM
ISO 27001 Lead Implementer / Lead Auditor
Key Competencies
Strong information security program management and governance experience
Ability to manage multiple concurrent cybersecurity initiatives
Strong executive communication and reporting skills
Risk-oriented thinking
Strong stakeholder management, influence, and coordination skills
Success Metrics for the Role
Timely delivery of security roadmap initiatives
Closure rate of security risk remediation programs
Effective BCP/DR program execution
Quality and effectiveness of Information Security reporting and governance dashboards
We are an equal opportunity employer and value diversity. We do not discriminate based on gender, race, age, sexual orientation, and religious identities or any other applicable characteristics protected by law. We seek individuals who uphold the highest standards of integrity, demonstrate professionalism in every interaction, treat others with respect, and consistently align personal ambition with the collective goals of the firm.
The incumbent is required to comply with the Firm’s Information Security policies and procedures, including safeguarding confidential information, adhering to secure data handling practices, and promptly reporting information security incidents.

Work arrangement
No