Lead - Information Security

Lead, Information Security
Capillary technologies is an enterprise-grade SaaS technology provider. We operate in the loyalty domain where we help our customers to better engage their users to enhance their business outcomes. To provide assurances to our customers, we comply with ISO 27001, PCI & SOC 2 type standards from information security perspective. On privacy front, we comply with Data Privacy laws of the countries (like GDPR, CCPA, etc) where we provide our services. We are looking for an experienced Information security lead to augment our infosec team to lead our Internal Security Assurance program while driving key Security Operations initiatives. The ideal candidate will have strong experience planning and leading internal audits against industry standards and regulations, along with hands-on experience managing operational security programs such as vulnerability management, incident response, security monitoring, and risk remediation.
Job responsibilities:
 Develop and execute information security internal audit program based on applicable regulatory, industry standard frameworks
 Lead end-to-end internal audits across technology, cloud infrastructure, applications, and business processes.
 Present audit findings, risk ratings, and recommendations & work with respective stakeholders to remediate them
 Support external certification and customer audits
 Continuously improve internal audit methodologies, checklists, and testing procedures.
 Should lead the security operation initiatives like vulnerability management, security incident response, alert monitoring, etc.
 Develop security metrics and dashboards.
Skills required:
• 8+ years’ experience in information security domain with at least 3 years’ leading an internal audit & 2 years leading security operations in a SaaS based env
• Should have led the entire cycle of risk management from identifying to remediation of risks
• Should have thorough knowledge of cloud computing and their intricacies with respect to information security and privacy principles
• Should have in depth knowledge in either vulnerability management, security incident response or security operations or all
• CISM or CISA or any leading industry certification a plus

Work arrangement
Hybrid