Lead Information Security and Data Privacy US

Tiger Analytics; Chennai District; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Tiger Analytics is seeking a Lead Information Security & Privacy to steer GRC objectives and drive the onshore implementation of ISO 27001 and ISO 27701. The role emphasizes threat mitigation and fostering a culture of security and privacy across the organization.

You will collaborate with US-based stakeholders, perform risk assessments on critical assets, manage audits, and lead the development and communication of security programs to leadership and staff.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or allied discipline.
• 7+ years in information security and privacy.
• Certification in ISO 27001/ISO 27701 or equivalent cybersecurity standards.
• Familiarity with risk concepts for AI deployments and LLMs is a plus.

Responsibilities

• Drive onshore ISO 27001 and ISO 27701 implementation across functions.
• Collaborate with US stakeholders for alignment during overlapping business hours.
• Establish documentation and monitoring for compliance, audits, and non-conformities.
• Perform deep-dive security and privacy risk assessments on critical data assets.
• Lead end-to-end audit lifecycle and remediation for ISO 27001, SOC 2, and related frameworks.
• Oversee incident investigations and coordinate timely remediation with stakeholders.

Skills

ISO 27001

ISO 27701

GRC Leadership

Stakeholder Collaboration

Threat & Risk Management

Education

Bachelor's degree in Computer Science or related field

Job description

As a Lead Information Security & Privacy, you will function as an individual contributor tasked with steering our GRC objectives, with a specific focus on leading the onshore implementation of ISO 27001 and ISO 27701 management systems. This role requires a proactive approach to threat mitigation and a deep commitment to fostering a culture of security and privacy awareness throughout the organization.

Key Responsibilities:

• Onshore ISO Implementation Leadership: Drive the onshore implementation and operationalization of ISO 27001 and ISO 27701 management systems, managing the execution of implementation phases across business functions, ensuring all processes align with organizational security and privacy objectives.
• Stakeholder Collaboration: Collaborate closely with US-based stakeholders, including function owners (IT, HR, Sales, Legal), to align onshore security and privacy practices with organizational objectives, requiring significant overlap with US business hours.
• Compliance & Metrics Monitoring: Establish and maintain rigorous documentation and compliance monitoring for ISO standards, facilitating internal/external assessments, management reviews, and timely resolution of non-conformities.
• Strategic Risk Assessment: Perform deep-dive security and privacy risk assessments on critical data assets and digital estates, identifying vulnerabilities and architecting advanced technical controls to mitigate threats.
• Regulatory Compliance: Ensure adherence to global data protection laws and privacy frameworks by architecting and sustaining rigorous controls designed to protect personal data.
• Audit Management: Spearhead the end-to-end lifecycle of internal and external security audits, driving readiness, coordination, and remediation to ensure continuous compliance with standards such as ISO 27001, SOC 2, and other relevant regulatory frameworks.
• Strategic Communication: Provide communication regarding security objectives, strategic initiatives, and organizational programs to both departmental leadership and the broader workforce.
• Incident Response: Direct investigations into security incidents, maintaining thorough documentation of findings and facilitating the expedient resolution and remediation of issues in partnership with stakeholders.

Required Qualifications, Skills, and Competencies:

• Bachelor's degree in Computer Science, Information Systems, or an allied discipline.
• 7+ years of experience in the domains of information security and privacy.
• Proficiency or professional certification in frameworks such as ISO 27001, ISO 27701, or equivalent cybersecurity standards.
• Familiarity in risk concepts for AI deployments and Large Language Models (LLMs) will be an advantage.
• Must be available to work in shifts with significant overlap with US business hours to support onshore implementation and stakeholder coordination from India.

Note: The title will be determined based on aspects such as years of relevant experience, skills, type of responsibilities handled, etc.