Associate Director / Director – Information Security & Client Assurance

Onextel Limited; Dadri; On-site; INR 4,500,000 - 9,000,000; Full time

Job summary

OneXtel Limited is seeking a seasoned leader for Associate Director/Director – Information Security & Client Assurance. You will own and strengthen ISMS, risk management, and governance across cloud and on‑prem environments while building client confidence through robust controls and certified compliance.

Lead ISO 27001, ISO 27701, SOC 2 Type II programs, manage audits, and drive regulatory alignment across India/regions.

Qualifications

• 10+ years in Information Security with at least 4+ years in GRC, compliance, audit or client assurance leadership.
• Experience owning and maturing ISMS, policies, risk assessments and control frameworks.
• Knowledge of data protection regulations and certifications (ISO 27001, SOC 2 Type II, PCI DSS).

Responsibilities

• Own the ISMS, security policies, risk assessments, and control frameworks.
• Lead certification and audits (ISO 27001, ISO 27701, SOC 2 Type II) and continuous control monitoring.
• Manage client assurance processes, RFP responses, vendor risk assessments, and client security audits.
• Collaborate with Legal, Sales and Engineering to implement security requirements in contracts and offerings.
• Build and mentor a high-performing GRC and Client Assurance team.

Skills

Information Security

GRC

Compliance

Audit

Client Assurance

ISMS

Incident Response

BCP/DR

Vendor Management

Stakeholder Mgmt

Education

Bachelor's degree in CS/Engineering or related field; Master's/MBA advantageous

Job description

We’re Hiring | Associate Director / Director – Information Security & Client Assurance

Division: Office of the CISO

Experience: 10+ years in Information Security, including 4+ years in GRC, Compliance, Audit or Client Assurance

About the Role

OneXtel is looking for a seasoned security leader to own and strengthen our Information Security, Governance, Risk & Compliance (GRC), and Client Assurance functions.

In this strategic leadership role, you will be responsible for securing OneXtel’s internal ecosystem while building client confidence through robust security controls, regulatory compliance, certifications, and transparent assurance practices.

As a trusted partner to the CISO, Engineering, Legal, Sales, and leadership teams, you will help ensure that our security commitments are not just documented but consistently implemented, evidenced, and delivered.

Information Security & Risk Management

• Own the Information Security Management System (ISMS), security policies, risk assessments, and control frameworks.
• Drive security across cloud, on-premises infrastructure, data centres, IAM, encryption, vulnerability management, logging, and secure SDLC.
• Strengthen incident response, business continuity, disaster recovery, and security awareness programmes.

Certifications, Audits & Regulatory Compliance

• Lead ISO 27001, ISO 27701, SOC 2 Type II, and other relevant certification and assurance programmes.
• Manage internal and external audits, evidence collection, remediation, and continuous control monitoring.
• Drive compliance with applicable data protection regulations, including India's DPDP framework, GDPR, and GCC privacy laws.

Enterprise Client Assurance

• Own security questionnaires, RFP responses, vendor risk assessments, and client security audits.
• Build and maintain client assurance packs, trust portals, and reusable compliance evidence.
• Partner with Legal and Sales to review and negotiate security, privacy, and compliance clauses in MSAs, DPAs, and SLAs.
• Support strategic BFSI, government, fintech, and other regulated enterprise clients in meeting their vendor security requirements.

Leadership & Stakeholder Management

• Report security posture, risks, audit findings, and compliance metrics to the CISO and senior leadership.
• Build and lead a high-performing GRC and Client Assurance team.
• Collaborate with Engineering, Infrastructure, Product, Legal, and Sales to embed security into business operations and accelerate enterprise deal closures.
• 10+ years of experience in Information Security, with at least 4 years in GRC, compliance, audit, or client assurance leadership.
• End-to-end ownership of ISO 27001 certification and at least one SOC 2 Type II or PCI DSS audit cycle.
• Practical knowledge of data protection laws across at least two regions, such as India, the EU, or the GCC.
• Proven experience supporting enterprise security assessments and audits, preferably for BFSI or government clients.
• Strong understanding of security architecture, cloud and on-prem infrastructure, IAM, encryption, monitoring, and secure SDLC.
• Experience reviewing and negotiating security and privacy clauses in commercial contracts.
• Excellent communication and stakeholder management skills, including engagement with auditors, client CISOs, and executive leadership.

Preferred Certifications

• CISSP / CISM / CISA
• ISO 27001 Lead Auditor or Lead Implementer
• CIPP/E / CIPP/A / CIPM or DPO certification
• CCSP / CCSK

Good to Have

• Experience with Big Four or leading cybersecurity consulting firms.
• Telecom, CPaaS, CCaaS, or messaging industry experience, including TRAI/DLT, SMPP, and operator security requirements.
• Bachelor's degree in Computer Science, Engineering, or a related field; a Master's degree or MBA is an advantage.

Why This Role Matters

At OneXtel, security and compliance are more than audit requirements — they are essential to earning and maintaining the trust of enterprise customers across industries and regions.

If you are passionate about building scalable security programmes, enabling regulatory confidence, and turning security assurance into a business advantage, we would love to hear from you!