Manager, Global IT Security Operations

Lonza Group; Gurugram District; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Agile culture

Inclusive workplace

Performance-based pay

Role-based benefits

Job summary

Lonza in Gurugram (Hybrid) seeks a Manager, Global IT Security Risk Management to lead the operational management and continuous improvement of Lonza's information security risk program. You will collaborate with business leaders, IT, procurement, legal, quality, compliance, and audit teams to strengthen governance and drive risk visibility.

This role emphasizes embedding security requirements across initiatives, delivering risk insights, and ensuring a proactive security posture across the

Qualifications

• 8+ years of experience in cybersecurity risk management, governance, compliance, audit, or information security.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Experience managing security risk assessments, third-party risk, audits, and compliance activities.

Responsibilities

• Lead and continuously improve the IT security risk management program.
• Provide risk-based guidance to stakeholders and support risk acceptance decisions.
• Maintain security policies, standards, and risk management processes aligned with industry frameworks (ISO 27001, NIST).
• Support audits, compliance reviews, and remediation of findings.
• Manage the global third-party cybersecurity risk program; oversee remediation of identified gaps.
• Lead responses to customer security assessments, questionnaires, and due diligence requests; report key risk, compliance, and security metrics; drive governance reviews.

Skills

Stakeholder management

Cybersecurity risk management

ISO 27001

NIST

DLP

Privileged Access Management (PAM)

Security governance

Audit coordination

Education

Bachelor's degree in Information Security or related field

Job description

Position- Manager, Global IT Security Operations

Location- Gurugram (Hybrid)

The Manager, Global IT Security Risk Management is responsible for leading the operational management and continuous improvement of Lonza's information security risk management program. This role ensures cybersecurity and technology risks are identified, assessed, documented, monitored, and managed in alignment with business objectives, regulatory requirements, and organizational risk appetite.

Reporting to the Global Head of IT Security & Compliance, the incumbent will partner with business leaders, IT teams, procurement, legal, quality, compliance, audit functions, customers, and external providers to strengthen security governance, enhance risk visibility, and drive a consistent enterprise-wide approach to cybersecurity risk management.

Success in this role is demonstrated through improved risk governance, strengthened compliance posture, reduction of unmanaged risk exposure, and delivery of meaningful insights that enable informed business decision-making.

What you will get:

• An agile career and dynamic working culture.
• An inclusive and ethical workplace.
• Compensation programs that recognize high performance.
• A variety of benefits dependent on role and location.

What You’ll Do

Information Security Risk Management

• Lead and continuously improve the IT security risk management program.
• Conduct risk assessments, maintain the security risk register, and drive mitigation and remediation activities.
• Provide risk-based guidance to stakeholders and support risk acceptance decisions.

Governance, Compliance & Audit

• Maintain security policies, standards, and risk management processes aligned with industry frameworks (e.g., ISO 27001, NIST).
• Support internal and external audits, compliance reviews, and remediation of findings.
• Ensure security requirements are embedded in business and technology initiatives.

Third-Party Risk Management

• Manage the global third-party cybersecurity risk program.
• Assess security risks of vendors and service providers and oversee remediation of identified gaps.
• Partner with Procurement and business stakeholders to strengthen supply chain security.

Customer Security Assurance

• Lead responses to customer security assessments, questionnaires, and due diligence requests.
• Coordinate with cross-functional teams to demonstrate compliance and security capabilities.
• Maintain customer assurance documentation and address evolving customer requirements.
• Develop and report key risk, compliance, and security metrics.
• Facilitate governance reviews and risk reporting for leadership.
• Drive continuous improvement of cybersecurity governance, risk, and compliance processes.

What we are looking for

• Bachelor’s degree in Information Security, Computer Science, IT, Risk Management, or a related field.
• 8+ years of experience in cybersecurity risk management, governance, compliance, audit, or information security.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Experience managing security risk assessments, third-party risk, audits, and compliance activities.
• Knowledge of DLP, Privileged Access Management (PAM), and security governance practices is preferred.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Auditor/Implementer are advantageous.
• Excellent stakeholder management, communication, and influencing skills in a global environment.
• Proven ability to drive risk-based decisions, manage competing priorities, and deliver results collaboratively.

About Lonza

At Lonza, our people are our greatest strength. With 30+ sites across five continents, our globally connected teams work together every day to manufacture the medicines of tomorrow. Our core values of Collaboration, Accountability, Excellence, Passion and Integrity reflect who we are and how we work together. Everyone’s ideas, big or small, have the potential to improve millions of lives, and that’s the kind of work we want you to be part of. Innovation thrives when people from all backgrounds bring their unique perspectives to the table.

At Lonza, we value diversity and are committed to creating an inclusive environment for all employees. If you’re ready to help turn our customers’ breakthrough ideas into viable therapies, we look forward to welcoming you on board.

Reference: R80254

You will feel at home at Lonza if you:

• Take ownership, step forward, and enjoy meaningful responsibility
• Love solving problems and thrive in a complex, fast-moving environment
• Are curious, always looking to learn and improve
• Work collaboratively, contributing to something bigger than yourself
• Are motivated to make a difference through work that impacts customers and their patients

Why Lonza:

We are a place of unique opportunity, where your ideas, expertise and ambition can make a real difference. Here, will have the freedom to grow, the support to succeed and the chance to contribute to work that matters.

We are the makers of the medicines of tomorrow.