InfoSec Manager

Qualitykiosk Technologies; Thane, Navi Mumbai, Mumbai; On-site; INR 4,000,000 - 6,400,000; Full time

Job summary

Qualitykiosk Technologies is seeking an experienced Information Security & Risk Management Lead to drive cybersecurity, governance, risk, and compliance initiatives. You will support the CISO in managing the ISMS, regulatory compliance, risk management, security operations, audits, and business continuity programs to maintain a strong security posture across the enterprise.

The role demands leadership in governance, risk management, and incident response, with hands-on experience in VAPT,

Qualifications

• 10+ years of Information Security experience with at least 8 years in leadership roles.
• Strong knowledge of information security governance, risk management, compliance, and operations.
• Experience in Banking/Financial Services domain preferred.
• Hands-on in VAPT, incident response, audits, DR/BCP, and security architecture.
• Expertise in ISO 27001/27701/42001, SOC2, GDPR, DPDP, COBIT, NIST, and ITIL.

Responsibilities

• Support the CISO in developing enterprise information security and risk programs.
• Lead ISMS governance, risk assessments, controls, and audits.
• Oversee security operations, incident response, vulnerability management.
• Define and report security KPIs and dashboards to leadership.
• Collaborate with IT, Legal, Audit, HR and stakeholders to strengthen controls.

Skills

Information Security Governance

Risk Management

Compliance

Security Operations

Audits

BCP/DR

Vulnerability Management

Incident Response

CIS Benchmarks

Stakeholder Management

Job description

Role Summary

We are seeking an experienced Information Security & Risk Management Lead to drive the organization's cybersecurity, governance, risk, and compliance initiatives. The role will support the CISO in managing the Information Security Management System (ISMS), regulatory compliance, risk management, security operations, audits, and business continuity programs while ensuring a strong security posture across the enterprise.

Key Responsibilities

Governance, Risk & Compliance

• Support the CISO in developing and implementing enterprise-wide information security and risk management programs.
• Manage and maintain ISMS policies, standards, procedures, and compliance frameworks.
• Drive risk assessments, RBAC governance, Third-Party Risk Management (TPRM), and risk treatment plans.
• Ensure compliance with ISO 27001, ISO 27701, ISO 42001, SOC2, GDPR, DPDP, ISO 22301, and other regulatory requirements.
• Lead internal and external audits, compliance reviews, and remediation activities.

Security Operations & Incident Management

• Oversee security incident response, investigation, remediation, and reporting.
• Manage vulnerability management, threat monitoring, ransomware preparedness, and security testing programs.
• Drive change management, exception management, and security governance processes.
• Monitor Email DLP, dark web exposure, social media threats, and platform security compliance.

Security Assessments & Technology Governance

• Conduct security reviews across applications, infrastructure, cloud, and network environments.
• Lead VAPT, Red Teaming, SAST, SCA, code reviews, and security architecture assessments.
• Review firewall configurations, Active Directory security, server hardening, network devices, and CIS benchmark compliance.
• Provide security guidance for technology projects and product engineering teams.

Business Continuity & Stakeholder Management

• Oversee Disaster Recovery (DR), Business Continuity Planning (BCP), and Work-From-Home security frameworks.
• Collaborate with IT, Legal, Audit, HR, Compliance, and business stakeholders to strengthen security controls.
• Manage security vendors, service providers, and regulatory interactions.
• Define and report KPIs, risk metrics, and security dashboards to leadership.

Required Experience & Qualifications

• 10+ years of Information Security experience with at least 8 years in leadership roles.
• Strong experience in Information Security Governance, Risk Management, Compliance, and Security Operations.
• Banking, BFSI, or Financial Services domain experience preferred.
• Hands-on experience in VAPT, Incident Response, Security Audits, Risk Assessments, DR/BCP, and Security Architecture.
• Strong knowledge of ISO 27001/27701/42001, SOC2, GDPR, DPDP, COBIT, NIST, and ITIL frameworks.
• Excellent stakeholder management, leadership, communication, and program management skills.

Preferred Certifications

• CISSP
• CISM
• CISA
• ISO 27001 Lead Auditor/Lead Implementer
• ISO 27701 Lead Auditor
• ISO 22301 Lead Auditor
• SOC2 / GDPR / DPDP related certifications