Information Security Manager

Openhire; Chennai District; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Openhire is seeking an experienced Information Security leader to own and strengthen the organisation's Information Security programme in India, aligning with global security frameworks. The role oversees governance, risk, compliance, operations, incident response, data protection, third-party security and security awareness.

The candidate will work with global teams to drive security across India, build capabilities, and lead audits against ISO 27001, SOC 2, HIPAA and local data protection

Qualifications

• 12–15 years of relevant Information Security experience.
• Experience leading enterprise Information Security programmes.
• Experience managing Information Security teams.
• Strong ISO 27001, SOC 2 and HIPAA expertise.
• Experience with AWS, Azure or GCP; healthcare/health-tech preferred.

Responsibilities

• Own the Information Security programme for the India business with policies and controls.
• Develop the security roadmap based on business priorities and risk exposure.
• Maintain risk register, remediation plans, ownership and escalation.
• Provide regular security updates and risk reporting to senior leadership.
• Lead the India Information Security team and develop capabilities.
• Coordinate global standards, governance, reviews and remediation actions.
• Oversee security monitoring, incident and vulnerability management.
• Partner with IT and Engineering on secure configurations and development.

Skills

Security leadership

Risk management

Compliance governance

Security awareness

Vendor management

Audits & assessments

Education

Bachelor's or Master's degree in Information Security

Tools

AWS

Azure

GCP

Security auditing tools

Job description

We are looking for an experienced Information Security leader to own and strengthen the organisation's Information Security programme in India and ensure alignment with global security frameworks.

The role will oversee security governance, risk management, compliance, security operations, incident response, data protection, third-party security, and security awareness. The individual will work closely with global Information Security, Technology, Engineering, Product, Legal, Privacy, Clinical and Business teams.

Key Responsibilities

• Own the Information Security programme for the India business and develop India-specific policies, standards, procedures and controls.
• Establish the security roadmap based on business priorities and risk exposure.
• Maintain the security risk register, remediation plans, risk ownership and escalation mechanisms.
• Provide regular security updates, risk reporting and recommendations to senior leadership.
• Act as the primary Information Security point of contact for India with global counterparts.
• Coordinate global security standards, governance activities, reviews, audits and remediation actions.
• Lead and manage the India Information Security team, including priorities, objectives, responsibilities, performance and development.
• Build team capabilities through training, certifications and exposure to emerging security practices.
• Lead or co-lead audits and assessments covering ISO 27001, SOC 2, HIPAA and applicable Indian data protection requirements.
• Coordinate evidence collection, auditor interactions, findings and remediation through closure.
• Oversee security monitoring, incident management, vulnerability management, penetration testing and remediation tracking.
• Lead the India response to significant security incidents and coordinate with global teams where required.
• Partner with IT and Engineering on endpoint, network, patching, secure configuration and application security controls.
• Work with Engineering and Product teams to incorporate security into architecture and development processes.
• Review security controls across cloud environments, applications, APIs and integrations.
• Provide oversight of IAM, privileged access, secrets management, logging, monitoring and periodic access reviews.
• Review security implications of new products, technologies and significant business changes.
• Own the security assessment process for vendors, partners and service providers.
• Partner with Procurement, Legal and business teams on security requirements during vendor onboarding and contracting.
• Oversee customer and partner security questionnaires and due-diligence requirements.
• Drive security awareness, phishing-awareness initiatives and security exercises across India.

Experience & Qualifications

• Bachelor's or master's degree in Information Security, Cybersecurity, Computer Science, IT or a related field.
• 12–15 years of relevant Information Security/Cybersecurity experience.
• Demonstrated experience leading or owning an enterprise Information Security programme.
• Experience managing Information Security teams.
• Strong experience with ISO 27001, SOC 2 and HIPAA.
• Strong understanding of risk management, security governance, IAM, cloud security, vulnerability management and incident response.
• Experience working with US-based security, technology and business teams.
• Experience managing external auditors, customers, partners and security assessments.
• Healthcare or health-tech experience will be highly preferred.
• Experience with AWS, Azure or GCP preferred.
• Certifications such as CISSP, CISM, CISA, CCSP or ISO 27001 Lead Auditor/Implementer preferred.