Manager – Information Security (CISM, ISO 27001 LA)

Glan Management Consultancy; Gurugram District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Glan Solutions is seeking a Manager - Information Security in Gurgaon with 10+ years of experience, including at least 3 years in leadership. The role requires a Bachelor's in IT/CS and strong certifications such as CISSP/CISM/CISA, with preferred MBA and ISO 27001/27701 Lead Auditor/Lead Implementor credentials.

The candidate will lead enterprise ISMS and PIMS initiatives, align security programs with ISO and IT Act requirements, oversee risk assessments, mentor a security team, and collaborate

Qualifications

• 10+ years of information security experience.
• Minimum 3 years in leadership roles.
• Bachelor's in IT/Computer Science.
• MBA and multiple security certifications preferred (CISSP/CISM/CISA).
• ISO 27001/27701 Lead Auditor and Lead Implementor experience.

Responsibilities

• Lead design, implementation, and continuous improvement of ISMS and PIMS programs.
• Develop InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Skills

InfoSec Leadership

Team Leadership

Strategic Thinking

Stakeholder Management

Excellent Communication

Education

Bachelor's in IT/CS

MBA

CISSP

CISM

CISA

ISO 27001/27701 Lead Auditor/Lead Implementor

Tools

IBM QRadar SIEM

GTB DLP

CyberArk PAM

Wiz CNAPP

SentinelOne EDR

Qualys VA

Cloud Security Governance (AWS/Azure)

MITRE ATT&CK

NIST CSF

CIS Controls

OWASP Top 10

Job description

Position: Manager - Information Security

Experience: 10+ years (with minimum 3 years in leadership roles)

Location: Gurgaon

Qualification: Bachelors in IT/Computer Science; Preferred: MBA, CISSP, CISM, CISA, ISO 27001/27701 Lead Auditor and Lead Implementor

Key Responsibilities

• Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
• Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
• Oversee security risk assessments, audits, and remediation plans across IT and business units.
• Manage a team of security professionals; mentor, coach, and evaluate performance.
• Collaborate with Legal, Compliance, IT, and Business stakeholders to ensure security by design.
• Lead incident response, RCA, and post-mortem reviews.
• Drive security awareness and training programs across the organization.
• Manage security budgets, vendor relationships, and contract negotiations.

Technical Skills

• Strong knowledge of IBM QRadar SIEM, GTB DLP, CyberArk PAM, Wiz CNAPP, Sentinel One EDR, Qualys VA and other PT tools.
• Experience in cloud security governance (Preferred on AWS and Azure; Good to have GCP).
• Experience of MITRE ATT&CK, NIST CSF, CIS Controls, OWASP Top 10.

Soft Skills

• Strategic thinking
• Stakeholder management
• Team leadership
• Excellent communication