Information Security Senior Specialist

Acies; Mumbai; On-site; INR 4,500,000 - 6,000,000; Full time

Job summary

Acies in Mumbai, India seeks an experienced Information Security leader to define and drive the security program across the product. You will oversee threat intelligence, vulnerability management, incident response, and policy development to protect assets and data.

The role requires 7+ years in information security with leadership experience and strong English communication to coordinate with stakeholders globally.

Qualifications

• 7+ years of information security experience with at least 5 years in leadership.
• Strong understanding of OWASP, CVSS, NIST Cybersecurity Framework, ISO 27001.
• Experience with cloud security best practices (AWS, Azure, GCP).
• Knowledge of threat intelligence and vulnerability management.
• Certifications preferred: CISSP, CISM, CISA; PMP preferred.
• Fluent in English; strong communication and leadership skills.

Responsibilities

• Develop and implement a comprehensive information security strategy aligned to objectives and regulatory requirements.
• Lead initiatives related to threat intelligence, vulnerability management, incident response, and data protection.
• Conduct security and risk assessments to identify, analyze, and mitigate risks across the business.
• Develop and maintain security policies, standards, and procedures.
• Oversee the implementation and maintenance of security controls.
• Lead incident response activities including containment, investigation, and remediation.
• Build and maintain relationships with internal and external stakeholders.
• Ensure compliance with relevant security regulations and industry best practices.
• Respond to customer asks related to Product security policy; manage client communications on information security.
• Manage and build a team of security professionals.

Skills

Leadership

Threat intelligence

Vulnerability management

Cloud security

Security frameworks

Job description

• Number of years of experience expected: 7+ years of experience in similar role, with at least 5 years in a leadership role.
• Areas of past experience preferred: Strong understanding of frameworks and standards (e.g., OWASP, CVSS, NIST Cybersecurity Framework, ISO 27001).Experience with cloud security best practices (e.g., AWS, Azure, GCP).
• Strong knowledge of threat intelligence and vulnerability management.
• Strong leadership, organizational, and problem-solving skills
• Additional certifications preferred: Relevant cybersecurity certifications (e.g., CISSP, CISM, CISA) are preferred.
• Preferable additional certifications: PMP
• Preferred geography of previous work experience: India / Europe / APAC / US
• Language requirements: Ability to write and speak fluently in English

Key responsibility areas:

• Develop and implement a comprehensive information security strategy for the product aligned to business objectives and regulatory requirements.
• Lead and manage initiatives related to company's security program including threat intelligence, vulnerability management, incident response, and data protection.
• Conduct security assessments and risk assessments to identify, analyze, and mitigate security risks across all areas of the business.
• Develop and maintain security policies, standards, and procedures.
• Oversee the implementation and maintenance of security controls.
• Lead incident response activities, including containment, investigation, and remediation.
• Build and maintain strong relationships with internal and external stakeholders.
• Ensure compliance with relevant security regulations and industry best practices.
• Respond to the customer ask associated with the Product security policy.
• Manage client communications and interactions related to information security related asks and issues.
• Manage and build a team of security professionals.

Selection process:

We seek to be transparent during the selection process. While the actual process may vary from the process indicated below, the key steps involved are as follows:

• Personal interviews: There are expected to be at least 2-3 rounds of online interviews. The number of interview rounds may increase depending on the criticality and seniority of the role involved.
• Final discussion on career and compensation: Post final selection, a separate discussion will be set up to discuss compensation and career growth. You are encouraged to seek any clarifications you have during this discussion.

For any additional queries you may have, you can send a LinkedIn InMail to us, connect with us at https://www.acies.consulting/contact-us.php or e-mail us at [e-mail].