Information Security Manager

SaaS Labs; Bengaluru; On-site; INR 450,000 - 800,000; Full time

Job summary

SaaS Labs is seeking a security leader to own and advance our information security program across frameworks, audits, and vendor risk. You’ll guide enterprise security reviews, respond to customer inquiries, and drive AI governance and cloud security improvements.

Ideal candidates have 8+ years in security with hands-on audit leadership, strong communication skills, and the ability to influence across engineering, product, sales, and legal teams in a fast-growing SaaS environment.

Qualifications

• 8+ years in Information Security, with at least 2 years owning a security program end-to-end.
• Strong experience implementing and managing security frameworks.
• Experience leading external audits and maintaining certifications.
• Deep knowledge of cloud security on AWS and/or GCP.
• Experience managing customer security reviews and enterprise requests.
• Understanding vendor risk, privacy, and data protection obligations.
• Excellent written communication to explain security concepts to stakeholders.
• Ability to work independently and make pragmatic security decisions in a fast-paced environment.

Responsibilities

• Own and improve security and compliance programs (SOC 2 Type II, ISO 27001, GDPR, HIPAA, PCI DSS, CSA STAR).
• Lead external audits from planning to remediation.
• Manage enterprise security reviews, customer questionnaires, RFP responses, Trust Center content.
• Review DPAs and vendor contracts with Legal.
• Build and manage third-party risk and vendor security program.
• Define AI governance framework and AI security controls.
• Lead security incident response end-to-end.
• Drive cloud security across AWS/GCP, IAM, least privilege, vulnerability management.
• Own security awareness, access reviews, policies, risk management.
• Partner with Engineering, Product, Sales, CS, People Ops to embed security.

Skills

Information Security

Cybersecurity

Governance, Risk & Compliance

Audits

Cloud Security (AWS/GCP)

Vendor Risk Management

Security Frameworks

Communication

Independent thinking

Job description

• Own and continuously improve our security and compliance programs, including SOC 2 Type II, ISO 27001, GDPR, HIPAA, PCI DSS, CSA STAR, and other relevant frameworks.
• Lead external audits from planning through remediation while ensuring continuous compliance.
• Manage enterprise security reviews, customer questionnaires, RFP security responses, and Trust Center content to support enterprise sales.
• Review customer DPAs, security addendums, and vendor contracts in partnership with Legal.
• Build and manage our third-party risk and vendor security program.
• Define and operationalize our AI governance framework, including AI security controls, model provider assessments, data handling, and customer AI commitments.
• Lead security incident response, including investigation, containment, customer communication, regulatory notifications, and post-incident reviews.
• Drive cloud security across AWS and GCP by improving IAM, least privilege, vulnerability management, configuration security, and infrastructure hardening.
• Own security awareness programs, access reviews, organizational security policies, and risk management processes.
• Partner closely with Engineering, Product, Sales, Customer Success, and People Operations to embed security into every stage of the business.

What we're looking for

• 8+ years of experience in Information Security, Cybersecurity, or Governance, Risk & Compliance, with at least 2 years owning a security program end-to-end.
• Strong experience implementing and managing security frameworks.
• Experience leading external audits, driving remediation, and maintaining compliance certifications.
• Deep understanding of cloud security across AWS and/or GCP, including IAM, network security, vulnerability management, and security best practices.
• Experience managing customer security reviews, security questionnaires, and enterprise compliance requests.
• Strong understanding of vendor risk management, privacy, and data protection obligations.
• Excellent written communication skills with the ability to explain complex security concepts to customers, auditors, and executive stakeholders.
• Ability to work independently, prioritize effectively, and make pragmatic security decisions in a fast-moving environment.

Edges that help

• CISSP, CISM, CISA, ISO 27001 Lead Auditor, or similar security certifications.
• Experience in a high-growth B2B SaaS company serving enterprise customers.
• Experience building AI governance, responsible AI, or AI security programs.
• Familiarity with customer contract negotiations, DPAs, and enterprise procurement processes.
• Experience supporting security initiatives across global engineering organizations.
• Own and maintain our Trust Center content.