Information Security Lead

HRV Pharma; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A leading pharmaceutical company in Hyderabad is seeking an Information Security Lead responsible for protecting data and internal security controls. This role involves defining security standards, implementing technical controls, and conducting risk assessments. Candidates must have 5-7 years of relevant experience, including hands-on expertise with endpoint security and a solid understanding of regulatory standards. The position offers a great opportunity to influence and shape the security practices within the organization.

Qualifications

• 5-7 years of experience in information security and data protection.
• Hands-on experience with endpoint security and access controls.
• Experience with security frameworks like ISO 27001, GDPR.

Responsibilities

• Owns information security and data protection for the organization.
• Define and maintain the security framework and risk controls.
• Conduct periodic risk assessments and security reviews.

Skills

Information security

Data protection

Risk management

Endpoint security

Analytical skills

Job description

Full-Time Hyderabad Information Technology Posted 1 week ago

We are seeking an Information Security Lead who owns the organization’s information security, data protection, and internal security controls. This is a hands‑on role responsible for both defining security standards and actively implementing, operating, and continuously improving technical controls across company‑managed devices, websites, applications, and systems.

The role combines strategic responsibility with day‑to‑day execution in protecting company data, intellectual property, and digital assets.

Key Responsibilities

• Owns information security and data protection, acting as the central point of contact for all related decisions and incidents.
• Define, implement, and maintain the organization’s security framework, including policies, standards, and risk‑based controls.
• Identify, evaluate, select, and operate appropriate security tools and technical controls, including data loss prevention (DLP) measures.
• Implement and manage endpoint, device‑level, and application controls to prevent unauthorized data exposure.
• Ensure secure data storage, transmission, backup, and access practices across all systems.
• Establish and operate monitoring, logging, and audit processes to detect, investigate, and respond to security risks and unauthorized activity, ensuring compliance with privacy and legal requirements.
• Conduct periodic risk assessments, security reviews, and control effectiveness evaluations.
• Assess and monitor third‑party vendors, tools, and service providers from a security and data protection perspective.
• Provide practical guidance, training, and awareness programs to employees on secure data handling, acceptable use, and compliance best practices.

Qualifications & Requirements

• 5-7 years of experience owning and implementing information security and data protection in an organization.
• Strong hands‑on experience with endpoint security, access controls, monitoring, and DLP‑style controls.
• Experience selecting, configuring, and operating security tools, not just managing vendors.
• Solid understanding of data protection principles, risk management, and secure system design.
• Experience with security frameworks and regulatory standards relevant to sensitive‑data environments (ISO 27001, GDPR, GxP, etc.).
• Hands‑on experience with monitoring, logging, and incident response.
• Ability to work independently with high ownership and accountability.
• Comfortable operating in regulated, quality‑driven, or sensitive‑data environments.
• Strong problem‑solving, analytical, and communication skills.
• Familiarity with cloud and SaaS security controls.

Application Process

Our HR team will review your application and contact suitable candidates.

Selected candidates will have a technical interview with the department head, followed by a final discussion with senior leadership and offer discussion.