Information Security Risk Specialist

Acesoft Labs; Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

Daimler Truck Innovation Center India, Bengaluru, seeks an experienced Information Security Risk Manager to lead enterprise risk efforts, coordinating across engineering, IT, legal, and external partners. You will oversee risk strategies to protect information assets against cyber threats and ensure compliance with standards.

The role requires 7–9 years of risk management experience, strong collaboration skills, and the ability to drive risk initiatives with global teams in a fast-paced

Qualifications

• Understanding of enterprise information security risk management.
• Experience with regulatory and standards compliance (ISO/NIST/GDPR as applicable).
• Strong communication and stakeholder management abilities.

Responsibilities

• Develop and maintain an enterprise information security risk program.
• Identify, assess, document, and prioritize information security risks.
• Perform risk assessments, vulnerability analyses, and impact evaluations.
• Collaborate with engineering, IT, legal, and external partners.
• Monitor and report risk metrics and KPIs to senior management.
• Ensure compliance with ISO 27001, NIST, GDPR, and related standards.
• Develop process documentation and stakeholder reports.
• Lead security awareness and risk training programs.
• Prepare detailed risk assessment reports for leadership.
• Lead incident response planning and investigations when needed.

Skills

ISO 27001

NIST CSF

COSO

COBIT

Risk assessment

Communication

Project leadership

Cross-functional collaboration

Education

Bachelor's degree in Information Security

Master's degree or certifications (CISSP/CISM/CEH)

Job description

Hi all,

we are looking for a role Information Security Risk Specialist

experience: 7 -9 years

notice period: Immediate - 15 days

location: Bengaluru

Information Security Risk Specialist Experience:

7 to 9 years Location: Bengaluru

Job Summary

We are seeking an experienced Information Security Risk Manager to join our team at Daimler Truck Innovation Center India, Bengaluru. The ideal candidate will lead the risk management and coordination efforts related to the overall security of enterprise systems, ensuring the development, implementation, and oversight of strategies that safeguard the information assets from cybersecurity threats, vulnerabilities, and attacks. This role requires strong collaboration across internal teams, including engineering, IT, legal, and regulatory bodies, as well as with external partners, such as suppliers and industry organizations. The ideal candidate will have a deep understanding of cybersecurity risk management methodologies, and the ability to oversee multiple initiatives aimed at strengthening the risk management practices at Daimler Truck

Key Responsibilities

• Develop, implement, and maintain an enterprise-wide information security risk management program.
• Identify, assess, and document information security risks, ensuring alignment with business objectives.
• Perform risk assessments, vulnerability analyses, and impact evaluations on IT systems and processes.
• Collaborate with cross-functional teams to establish risk mitigation strategies and action plans.
• Monitor, track, and report on risk metrics and key performance indicators (KPIs).
• Stay updated on regulatory requirements and ensure compliance with standards such as ISO 27001, NIST, GDPR, etc.
• Develop and maintain comprehensive process documentation and generate reports tailored to the needs of various stakeholders.
• Drive security awareness programs and train employees on risk management practices.
• Prepare and present detailed risk assessment reports to senior management.
• Lead incident response planning and participate in cybersecurity investigations when necessary.

Qualifications: Education:

• Bachelors degree in Information Security, Cyber Security, Computer Science, Information Science, or a related field.
• Advanced degrees (e.g, Masters) or certifications (e.g, CISSP, CRISC, CISM, CEH) are a plus.

Qualifications: Experience:

• 5+ years of experience in information security, risk management, or related domains.

Qualifications: Skills and Competencies:

• Comprehensive understanding of frameworks such as ISO 27001, NIST Cybersecurity Framework, COSO, and COBIT.
• Proven analytical expertise in evaluating and prioritizing risks effectively.
• Advanced proficiency in utilizing security tools for risk assessment and mitigation.
• Strong preference for candidates with certifications like CISSP, CISM, CRISC, or equivalent.
• Exceptional communication and presentation skills, with a proven ability to collaborate effectively across diverse teams.
• Demonstrated problem-solving capabilities, including critical thinking and informed decision-making under pressure.
• Skilled in leading security initiatives and managing projects across global teams.
• A strategic mindset paired with keen attention to detail.
• Resourceful and decisive under high-pressure situations.
• An effective team player with exceptional interpersonal and collaboration skills.