Information Security Manager

Antier-Solutions-Pvt.-Ltd; Vadodara; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Antier-Solutions-Pvt.-Ltd is seeking an experienced Information Security Manager to lead and oversee the organization’s information security program. This role requires strong governance, risk management, and incident management expertise to drive continual improvement across engineering, DevOps, IT, QA, and business teams.

The candidate will establish and enforce security policies, conduct audits, manage vulnerabilities, and ensure compliance with HIPAA, SOC 2, ISO 27001, and NIST where

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity.
• 8–12 years in information security or IT security.
• At least 3 years in security management or senior leadership.
• Strong governance, risk, vulnerability management, and auditing.
• Knowledge of application security, OWASP Top 10, secure coding, API security.
• Experience with cloud security (AWS/Azure) and network/database security.
• Experience in incident response and remediation.
• Experience developing security policies and controls.
• Preferred certifications such as CISSP/CISM/CISA/CCSP are a plus.

Responsibilities

• Own and manage the organization's information security program, policies, standards, and procedures.
• Conduct periodic security audits and assessments across departments.
• Identify vulnerabilities, gaps, risks, and recommend corrective actions.
• Maintain security risk registers, remediation plans, and compliance docs.
• Oversee application, infrastructure, cloud, database, and network security.
• Ensure secure software development practices and security controls.
• Manage security incidents, investigations, and remediation actions.
• Establish monitoring, vulnerability management, and access controls.
• Ensure compliance with HIPAA, SOC 2, ISO 27001, NIST as applicable.
• Prepare security assessment reports and risk summaries for leadership.
• Drive security awareness and training across the organization.
• Monitor remediation activities and timelines.

Skills

Security governance

Risk management

Security auditing

Incident management

Cloud security

Network security

Application security

Leadership

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

AWS

Azure

ISO 27001

Job description

Department: Information Security / Technology

Position Type: Full-Time

Experience Level: Senior / Management

Scope: Organization-wide, including all technology and business departments

Experience: 7-10 Years

About the Role

We are looking for an experienced Information Security Manager to lead and oversee the organization's information security program.

The individual will be responsible for establishing security policies and standards, ensuring security practices are implemented across all departments, conducting security audits, identifying risks, managing security incidents, and driving continuous improvement of the organization's security posture.

This role requires a combination of strong technical cybersecurity knowledge, security governance expertise, risk management experience, and the ability to work independently with engineering, DevOps, IT, QA, and business teams.

The successful candidate will serve as the primary point of contact for all information security matters across the organization.

Key Responsibilities

• Own and manage the organization's information security program, policies, standards, and procedures.
• Conduct periodic security audits and assessments across Engineering, DevOps, IT, QA, and other departments.
• Identify security vulnerabilities, compliance gaps, operational risks, and recommend corrective actions.
• Establish and maintain security risk registers, remediation plans, and compliance documentation.
• Oversee application, infrastructure, cloud, database, and network security practices.
• Ensure secure software development practices and security controls are implemented across engineering teams.
• Manage security incidents, investigations, root-cause analysis, incident reporting, and corrective actions.
• Establish security monitoring, vulnerability management, access control, and security review processes.
• Ensure compliance with applicable security standards and regulatory requirements, including HIPAA, SOC 2, ISO 27001, and NIST, as applicable.
• Prepare security assessment reports, risk summaries, and recommendations for executive leadership.
• Drive security awareness and training programs across the organization.
• Monitor remediation activities and ensure identified security issues are resolved within agreed timelines.

Required Qualifications and Skills

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 8–12 years of experience in information security, cybersecurity, or IT security.
• At least 3 years of experience in security management, governance, risk management, or a senior security leadership role.
• Strong understanding of security governance, risk assessments, vulnerability management, and security auditing.
• Practical knowledge of application security, OWASP Top 10, secure coding practices, API security, and authentication mechanisms.
• Experience with cloud security (AWS/Azure), infrastructure security, database security, network security, and access management.
• Experience managing security incidents, investigations, and remediation activities.
• Demonstrated experience developing and implementing security policies, procedures, and organizational security controls.
• Strong communication, documentation, analytical, and leadership skills.

Preferred Qualifications

• CISSP, CISM, CISA, CCSP, or ISO 27001 Lead Auditor / Lead Implementer certification.
• Experience in healthcare technology or organizations handling sensitive patient information.
• Practical knowledge of HIPAA Security Rule, SOC 2, and ISO 27001 requirements.
• Experience with AWS cloud security and SaaS application security.
• Experience conducting internal security audits and coordinating external security assessments.

What We Are Looking For

• A self-driven professional capable of independently managing the organization's security program.
• Someone who can technically evaluate security implementations rather than relying solely on reports from other teams.
• Ability to identify security gaps, challenge existing practices, and drive corrective actions.
• Strong ownership and accountability for organization-wide security.
• Ability to communicate technical risks and provide clear, actionable recommendations to management.

Our expectation: The individual will take ownership of the organization's security posture, ensure security best practices are followed across all departments, and continuously improve the organization's overall security maturity.