Manager, Information Security & Compliance

Neara; India; On-site; INR 3,000,000 - 5,500,000; Full time

Job summary

SaaS Labs in Bengaluru, India—a leading AI-driven SaaS company—seeks an Information Security & Compliance Manager to own and evolve security, privacy, and compliance across products, cloud infrastructure, and internal operations. You will partner with Legal, Engineering, Sales, and Customer Success to align security with growth.

Lead audits, certifications, and security reviews while building a scalable security program that enables enterprise customers and accelerates product innovation.

Qualifications

• 8+ years in Information Security, Cybersecurity, or Governance, Risk & Compliance.
• 2+ years owning a security program end-to-end.
• Strong experience implementing and managing security frameworks.
• Deep understanding of cloud security across AWS and/or GCP, including IAM and network security.
• Experience managing customer security reviews, security questionnaires, and enterprise requests.
• Knowledge of vendor risk management, privacy, and data protection obligations.
• Excellent written communication and ability to explain security concepts to executives.

Responsibilities

• Own and continuously improve our security and compliance programs (SOC 2 Type II, ISO 27001, GDPR, HIPAA, PCI DSS, CSA STAR).
• Lead external audits from planning through remediation.
• Manage enterprise security reviews, customer questionnaires, RFP responses, and Trust Center content.
• Review DPAs, security addenda, and vendor contracts with Legal.
• Build and manage third‑party risk and vendor security program.
• Define and operationalize AI governance, including AI security controls.

Skills

Information security

Governance, risk & compliance

Audits & compliance

Cloud security (AWS/GCP)

Vendor risk management

Security architecture

Executive communication

Job description

Manager, Information Security & Compliance

Job type: Full Time · Department: Engineering · Work type: On-Site

Bengaluru, Karnataka, India

Why this role exists

SaaS Labs is trusted by thousands of businesses globally to power customer conversations through JustCall and our growing AI product ecosystem. As we continue to scale our enterprise business, security, privacy, and compliance become key differentiators, not just operational requirements.

We're looking for an Information Security & Compliance Manager to own our security and compliance program end-to-end. You'll build and evolve our security posture across products, cloud infrastructure, AI systems, and internal operations while enabling enterprise growth. This is a highly strategic, hands-on role where you'll partner with Engineering, Legal, Sales, and Customer Success to ensure security becomes a competitive advantage rather than a bottleneck.

What you'll do

• Own and continuously improve our security and compliance programs, including SOC 2 Type II, ISO 27001, GDPR, HIPAA, PCI DSS, CSA STAR, and other relevant frameworks.
• Lead external audits from planning through remediation while ensuring continuous compliance.
• Manage enterprise security reviews, customer questionnaires, RFP security responses, and Trust Center content to support enterprise sales.
• Review customer DPAs, security addendums, and vendor contracts in partnership with Legal.
• Build and manage our third-party risk and vendor security program.
• Define and operationalize our AI governance framework, including AI security controls, model provider assessments, data handling, and customer AI commitments.
• Lead security incident response, including investigation, containment, customer communication, regulatory notifications, and post-incident reviews.
• Drive cloud security across AWS and GCP by improving IAM, least privilege, vulnerability management, configuration security, and infrastructure hardening.
• Own security awareness programs, access reviews, organizational security policies, and risk management processes.
• Partner closely with Engineering, Product, Sales, Customer Success, and People Operations to embed security into every stage of the business.

What we're looking for

• 8+ years of experience in Information Security, Cybersecurity, or Governance, Risk & Compliance, with at least 2 years owning a security program end-to-end.
• Strong experience implementing and managing security frameworks.
• Experience leading external audits, driving remediation, and maintaining compliance certifications.
• Deep understanding of cloud security across AWS and/or GCP, including IAM, network security, vulnerability management, and security best practices.
• Experience managing customer security reviews, security questionnaires, and enterprise compliance requests.
• Strong understanding of vendor risk management, privacy, and data protection obligations.
• Excellent written communication skills with the ability to explain complex security concepts to customers, auditors, and executive stakeholders.
• Ability to work independently, prioritize effectively, and make pragmatic security decisions in a fast-moving environment.

Edges that help

• CISSP, CISM, CISA, ISO 27001 Lead Auditor, or similar security certifications.
• Experience in a high-growth B2B SaaS company serving enterprise customers.
• Experience building AI governance, responsible AI, or AI security programs.
• Familiarity with customer contract negotiations, DPAs, and enterprise procurement processes.
• Experience supporting security initiatives across global engineering organizations.
• Own and maintain our Trust Center content.

How we work

At SaaS Labs, we value ownership, speed, and customer obsession. We believe the best ideas come from people who are empowered to solve problems, challenge assumptions, and continuously improve how we work.

This role reports directly to the SVP of Engineering and works closely with Legal, while partnering cross-functionally with Engineering, Product, Sales, and Customer Success. You’ll have the autonomy to make critical decisions, shape our security strategy, and build a strong security culture that enables innovation and accelerates enterprise growth.