Manager Global IT Security Operations

Lonza; Gurugram District; Hybrid; Confidential; Full time

Job summary

Lonza in Gurugram (Hybrid) is seeking a seasoned Manager to lead Lonza's IT security risk management program. You will drive risk assessments, maintain the security risk register, and guide remediation initiatives to strengthen the organisation's cybersecurity posture.

You will partner with business leaders, IT teams, procurement, legal and audit to embed security into initiatives, monitor compliance, and provide meaningful risk insights for informed decision-making across the enterprise.

Qualifications

• Bachelor’s degree in Information Security, CS, IT, or Risk Management.
• 8+ years of cybersecurity risk management, governance, compliance, or audits.
• Strong knowledge of ISO 27001 and NIST frameworks.
• Experience with third‑party risk, audits, and regulatory compliance.
• CISSP/CISM/CRISC or ISO 27001 Auditor/Implementer is a plus.
• Excellent stakeholder management in a global environment.

Responsibilities

• Lead and continuously improve the IT security risk management program.
• Perform risk assessments, maintain risk registers, drive mitigations.
• Provide risk-based guidance to stakeholders and support risk acceptance.
• Ensure security requirements are embedded in business and tech initiatives.
• Coordinate with auditors and compliance teams for remediation.

Skills

Risk management

Governance

Compliance

Audit

Stakeholder management

Education

Bachelor’s degree in Information Security or related field

Tools

ISO 27001

NIST CSF

Job description

Job Description:

Position

Manager, Global IT Security Operations

Location

Gurugram (Hybrid)

The Manager, Global IT Security Risk Management is responsible for leading the operational management and continuous improvement of Lonza's information security risk management program. This role ensures cybersecurity and technology risks are identified, assessed, documented, monitored, and managed in alignment with business objectives, regulatory requirements, and organizational risk appetite.

Reporting to the Global Head of IT Security & Compliance, the incumbent will partner with business leaders, IT teams, procurement, legal, quality, compliance, audit functions, customers, and external providers to strengthen security governance, enhance risk visibility, and drive a consistent enterprise-wide approach to cybersecurity risk management.

Success in this role is demonstrated through improved risk governance, strengthened compliance posture, reduction of unmanaged risk exposure, and delivery of meaningful insights that enable informed business decision‑making.

What you will get:

• An agile career and dynamic working culture.
• An inclusive and ethical workplace.
• Compensation programs that recognize high performance.
• A variety of benefits dependent on role and location.

What You’ll Do

Information Security Risk Management

• Lead and continuously improve the IT security risk management program.
• Conduct risk assessments, maintain the security risk register, and drive mitigation and remediation activities.
• Provide risk-based guidance to stakeholders and support risk acceptance decisions.

Governance, Compliance & Audit

• Maintain security policies, standards, and risk management processes aligned with industry frameworks (e.g., ISO 27001, NIST).
• Support internal and external audits, compliance reviews, and remediation of findings.
• Ensure security requirements are embedded in business and technology initiatives.

Third-Party Risk Management

• Manage the global third-party cybersecurity risk program.
• Assess security risks of vendors and service providers and oversee remediation of identified gaps.
• Partner with Procurement and business stakeholders to strengthen supply chain security.

Customer Security Assurance

• Lead responses to customer security assessments, questionnaires, and due diligence requests.
• Coordinate with cross-functional teams to demonstrate compliance and security capabilities.
• Maintain customer assurance documentation and address evolving customer requirements.

Reporting & Continuous Improvement

• Develop and report key risk, compliance, and security metrics.
• Facilitate governance reviews and risk reporting for leadership.
• Drive continuous improvement of cybersecurity governance, risk, and compliance processes.

What we are looking for

• Bachelor’s degree in Information Security, Computer Science, IT, Risk Management, or a related field.
• 8+ years of experience in cybersecurity risk management, governance, compliance, audit, or information security.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Experience managing security risk assessments, third-party risk, audits, and compliance activities.
• Knowledge of DLP, Privileged Access Management (PAM), and security governance practices is preferred.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Auditor/Implementer are advantageous.
• Excellent stakeholder management, communication, and influencing skills in a global environment.
• Proven ability to drive risk-based decisions, manage competing priorities, and deliver results collaboratively.

About Lonza

At Lonza, our people are our greatest strength. With 30+ sites across five continents, our globally connected teams work together every day to manufacture the medicines of tomorrow. Our core values of Collaboration, Accountability, Excellence, Passion and Integrity reflect who we are and how we work together. Everyone’s ideas, big or small, have the potential to improve millions of lives, and that’s the kind of work we want you to be part of. Innovation thrives when people from all backgrounds bring their unique perspectives to the table.

At Lonza, we value diversity and are committed to creating an inclusive environment for all employees. If you’re ready to help turn our customers’ breakthrough ideas into viable therapies, we look forward to welcoming you on board.