Manager - Information Security and Data Privacy

Tiger Analytics; Chennai; On-site; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Health insurance

Professional development opportunities

Job summary

Tiger Analytics in Chennai, India seeks an experienced Manager - Information Security & Data Privacy to lead GRC initiatives and strengthen the organization’s security posture.

You will oversee governance, risk assessments, audits, and privacy controls, ensuring compliance with ISO 27001/27701, SOC 2, GDPR, and HIPAA, while evaluating AI/LLM risks and coordinating with stakeholders, auditors, regulators and partners.

Qualifications

• Bachelor's degree in CS/IS or related discipline.
• 13+ years in Information Security, Cybersecurity, Privacy, or GRC.
• Strong experience in ISO 27001, ISO 27701, SOC 2, GDPR, HIPAA, and audit management.
• Proven expertise in policy development, compliance mgmt, and risk assessments.
• Experience evaluating AI/LLM security/privacy risks.
• Professional certifications such as ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CIPM, CIPT preferred.

Responsibilities

• Lead Governance, Risk, and Compliance (GRC) initiatives.
• Manage security governance programs, compliance activities, and privacy controls.
• Conduct risk assessments and lead audit engagements.
• Ensure adherence to global regulatory and industry requirements.
• Assess security/privacy risks of AI/LLM technologies and collaborate with stakeholders.

Skills

ISO 27001

ISO 27701

SOC 2 Type II

GDPR

HIPAA

risk management

security audits

privacy compliance

policy governance

AI/LLM risk assessment

Education

Bachelor's degree in Computer Science or related

Job description

We are seeking an experienced Manager - Information Security & Data Privacy professional to lead Governance, Risk, and Compliance (GRC) initiatives and strengthen the organization’s information security and privacy posture.

The role will be responsible for managing security governance programs, compliance activities, privacy controls, risk assessments, and audit engagements while ensuring adherence to global regulatory and industry requirements. The ideal candidate should have strong expertise across ISO 27001, ISO 27701, SOC 2 Type II, GDPR, HIPAA, risk management, security audits, privacy compliance, and policy governance.

The candidate will also be expected to assess security and privacy risks associated with emerging technologies, including AI and Large Language Models (LLMs), and work closely with internal stakeholders, customers, auditors, regulators, and external partners.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or a related discipline.
• 13+ years of experience in Information Security, Cybersecurity, Privacy, or GRC functions.
• Strong experience in ISO 27001, ISO 27701, SOC 2, GDPR, HIPAA, and audit management.
• Proven expertise in policy development, compliance management, and risk assessments.
• Experience evaluating security and privacy risks related to AI/LLM technologies.
• Professional certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CIPM, CIPT, or equivalent are preferred.