Senior Manager Information Security

Senior Manager – Platform & Infrastructure Security (PCI DSS & Cloud Security)
📍 Location: Bangalore (Hybrid - 3 Days/Week WFO)
💼 Experience: 15-20 Years
👥 Team Management: Mandatory
🔒 Key Skills: PCI DSS, Cloud Security, Security Compliance, ISO 27001, Risk & Audit Management
About the Role
We are looking for an experienced Senior Manager / Functional Security Architect to lead the Platform & Infrastructure Security (PIS) function. This leadership role is responsible for driving enterprise-wide security, compliance, governance, and cloud security initiatives while managing global teams and collaborating with senior stakeholders.
The ideal candidate will have extensive experience in PCI DSS compliance, cloud security governance, security audits, infrastructure security, and people leadership, with a proven track record of delivering large-scale security transformation programs.
Key Responsibilities
Security & Compliance Leadership
Lead and drive organization-wide PCI DSS v4.0 compliance programs, certification, recertification activities, and audit readiness.
Own and govern ISO 27001, security controls, compliance frameworks, and risk management initiatives.
Establish and maintain security-by-design practices across platform and infrastructure environments.
Ensure compliance with organizational security policies, standards, and regulatory requirements.
Lead SOC, ISMS, PCI, and compliance audit engagements while managing remediation activities.
Cloud Security & Governance
Drive enterprise-wide Cloud Security strategy and adoption.
Lead implementation of Cloud Security Guardrails, Policy-as-a-Service (POaaS), and security governance models.
Partner with architecture, engineering, and platform teams to embed security across cloud-native environments.
Define cloud security standards, risk controls, and compliance frameworks across multi-cloud ecosystems.
Security Programs & Risk Management
Lead strategic security initiatives including:
File Integrity Monitoring (FIM)
Vulnerability Management
Security Governance Programs
Risk Register Management
Privacy & Impact Assessments
Security Exception Management
Firewall Reviews
Penetration Testing Governance
Establish metrics, controls, and KPIs to measure security effectiveness and compliance maturity.
Stakeholder Management & Advisory
Act as a trusted security advisor to senior leadership, platform teams, cloud teams, infrastructure teams, and compliance stakeholders.
Collaborate with design authorities and business leaders to influence secure technology decisions.
Present security strategies, compliance status, and risk posture to executive management.
People Leadership & Operational Excellence
Lead, mentor, and develop high-performing global security teams.
Foster a culture of accountability, collaboration, innovation, and continuous improvement.
Drive resource planning, team capability development, performance management, and succession planning.
Improve operational efficiency through automation, process optimization, and governance excellence.
Mandatory Requirements
✅ 15-20 years of experience in Information Security, Cyber Security, Infrastructure Security, Governance Risk & Compliance (GRC), or related domains.
✅ Strong PCI DSS experience (Mandatory) including audit preparation, certification, compliance management, and stakeholder engagement.
✅ Proven Cloud Security experience (Mandatory) across enterprise cloud environments.
✅ People Management experience (Mandatory) managing large security/compliance teams.
✅ Experience leading:
Security Governance
Risk Management
Compliance Programs
Audit Readiness
Vulnerability Management
Security Operations Governance
✅ Strong stakeholder and executive communication skills.
Preferred Qualifications
CISSP
CISM
CISA
CCSP
PCI-ISA
ISO 27001 Lead Auditor / Lead Implementer
Additional Advantage
Experience with SOC audits and reporting.
Strong understanding of NIST, ISO 27001, PCI DSS, and enterprise security frameworks.
Experience working with cloud, platform, infrastructure, privacy, and security teams at enterprise scale.
Success Metrics
Successful PCI DSS & ISO 27001 audit outcomes.
Enhanced cloud security maturity and governance.
Improved compliance posture and risk reduction.
Stakeholder satisfaction and operational excellence.
Team engagement, leadership effectiveness, and talent development.
Increased automation and measurable security program efficiencies.
📩 Interested candidates with strong PCI DSS, Cloud Security, and People Management experience can share their profiles for further discussion.

Work arrangement
No