Information Security and Data Privacy - Lead

Tiger Analytics; Chennai District; On-site; INR 3,000,000 - 5,200,000; Full time

Job summary

Tiger Analytics seeks a Lead Information Security and Data Privacy to steer GRC objectives, providing technical oversight for complex systems including cloud and AI initiatives, safeguarding CIA of data. Role involves strategic risk assessments, regulatory alignment, and remediation across ISO 27001, SOC 2, GDPR, and HIPAA.

Ideal candidates have a CS/IS degree, a law qualification preferred, and 7+ years in information security and privacy, with certifications in relevant frameworks.

Qualifications

• 7+ years of experience in information security and privacy.
• Proficiency or certification in ISO 27001, ISO 27701 or equivalent standards.
• Familiarity with risk concepts for AI deployments and LLMs.

Responsibilities

• Strategic risk assessments on data assets and digital estates; design advanced controls.
• Review information security and data privacy provisions in client and supplier contracts, including DPAs.
• Ensure adherence to global data protection laws and privacy frameworks; sustain rigorous controls.

Skills

InfoSec & Privacy exp

AI risk concepts

Compliance frameworks

Education

Bachelors in CS/IS

Law degree or equivalent

Job description

Lead Information Security and Data Privacy

As a Lead Information Security & Privacy, you will function as an individual contributor tasked with

steering the organisations GRC objectives. This role involves providing technical oversight and regulatory

alignment for complex systemsincluding cloud environments and AI initiativesto safeguard the

Confidentiality, Integrity, and Availability (CIA) of organizational and client data.

Key Responsibilities:

• Strategic Risk Assessment: Perform deep-dive security and privacy risk assessments on critical data assets and digital estates, identifying vulnerabilities and architecting advanced technical controls to mitigate threats.
• Contractual Review: Conduct comprehensive reviews of information security and data privacy provisions within client and supplier agreements, including Data Processing Agreements (DPAs), to ensure alignment with organizational policy and legal obligations.
• Regulatory Compliance: Ensure adherence to global data protection laws and privacy frameworks by architecting and sustaining rigorous controls designed to protect personal data.
• Compliance Oversight: Strategize and manage comprehensive compliance activities, including assessments, audits, testing, and remediation, to standards such as ISO 27001, ISO 27701, SOC 2 Type 2, GDPR, and HIPAA.
• Audit Management: Spearhead the end-to-end lifecycle of internal and external security audits, driving readiness, coordination, and remediation to ensure continuous compliance with standards such as ISO 27001, SOC 2, and other relevant regulatory frameworks.
• Strategic Communication: Provide communication regarding security objectives, strategic initiatives, and organizational programs to both departmental leadership and the broader workforce.
• Business Support: Act as the primary point of contact for information security and data privacy inquiries during the sales cycle, including managing RFPs, client security questionnaires, and detailed security assessments.
• Incident Response: Direct investigations into security incidents, maintaining thorough documentation of findings and facilitating the expedient resolution and remediation of issues in partnership with stakeholders.

Required Qualifications, Skills, and Competencies:

• Bachelor's degree in Computer Science, Information Systems, or an allied discipline.
• A degree in Law or a relevant legal qualification is preferred, given the focus on contractual reviews and regulatory compliance.
• 7+ years of experience in the domains of information security and privacy.
• Proficiency or professional certification in frameworks such as ISO 27001, ISO 27701, or equivalent cybersecurity standards.
• Familiarity in risk concepts for AI deployments and Large Language Models (LLMs) will be an advantage.

Note: The title will be determined based on aspects such as years of relevant experience, skills, type of

responsibilities handled, etc.