Manager - IT Security

Key Deliverables (Essential functions & Responsibilities of the Job): Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs. Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In). Oversee security risk assessments, audits, and remediation plans across IT and business units. Manage a team of security professionals; mentor, coach, and evaluate performance. Collaborate with cross functional stakeholders to ensure security by design. Lead incident response, RCA, and post-mortem reviews. Drive security awareness and training programs across the organization. Manage security budgets, vendor relationships, and contract negotiations. Skills: Expertise in QRadar, GTB DLP, CyberArk PAM, Wiz CNAPP, SentinelOne EDR, Qualys VA, and PT tools. Cloud security governance experience (AWS, Azure; GCP optional). Strong knowledge of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10. Strategic mindset and strong stakeholder management. Proven team leadership and excellent communication. Strong documentation and reporting skills.