Manager - Infosec RISK & Compliance

QX Global Group; Dadri; On-site; INR 1,400,000 - 2,800,000; Full time

Job summary

QX Global Group is seeking a Manager– Information Security to lead our infosec operations, ensure data protection, monitor user activities, and maintain compliance with international standards.

The role involves auditing, reporting, and proactively managing risks related to data access, authentication, and user registration, with collaboration across IT, HR, and operations. Strong governance and client-facing reporting are essential.

Qualifications

• Experience in information security operations and risk management.
• Auditing readiness for ISO 27001, ISO 27701, Cyber Essentials Plus, and SOC 2.
• Knowledge of GDPR in data handling and processing.
• Ability to produce client-facing security reports and indicate controls clearly.

Responsibilities

• Track risks related to data access, authentication, user registration, and user activity.
• Prepare and share infosec reports with the client to ensure transparency and assurance.
• Maintain and update risk registers and incident logs.
• Lead internal audits and readiness assessments for ISO 27001, ISO 27701, Cyber Essentials Plus, and SOC 2.
• Collaborate with IT, HR, and operations to ensure secure onboarding and access control.
• Respond to client queries and participate in governance meetings as needed.
• Ensure GDPR compliance across all data handling and processing activities.

Skills

InfoSec operations

Risk assessments

IAM & access

Audits & logs

GDPR compliance

Client reporting

Job description

We are seeking a qualified and experienced Manager– Information Security to lead our infosec operations and provideassurance to a first-time outsourcing client. This role is critical inensuring robust data protection, monitoring user activities, and maintainingcompliance with international standards. The ideal candidate will beresponsible for auditing, reporting, and proactively managing risks relatedto data access, authentication, and user registration.

EssentialDuties and Responsibilities

• Track and report risksrelated to data access, authentication, user registration, and useractivity.
• Prepare and shareregular infosec reports with the client to ensure transparency and assurance.
• Maintain and update riskregisters and incident logs.
• Lead internal audits and readiness assessments for ISO 27001, ISO 27701, Cyber Essentials Plus, and SOC 2.
• Collaborate with IT, HR, and operations to ensure secure onboarding and access control.
• Respond to clientqueries and participate in governance meetings as needed.
• Ensure GDPR complianceacross all data handling and processing activities.

Skills& Experience

• Demonstrated experiencemanaging information security operations, risk assessments, riskregisters, and incident logs.
• Strong knowledge ofidentity and access management, authentication, user provisioning anddeprovisioning, access reviews, and user activity monitoring.
• Hands‑on experienceconducting internal audits, gathering evidence, tracking correctiveactions, and supporting readiness assessments for ISO 27001, ISO 27701,Cyber Essentials Plus, and SOC 2.
• Working knowledge ofGDPR requirements and their application to data handling and processing.
• Experience preparingclient-facing security reports, explaining risks and controls clearly,and participating in governance meetings.
• Ability to collaboratewith IT, HR, and operations to implement secure onboarding and accesscontrols.
• Strong analytical,documentation, stakeholder-management, and communication skills, withthe ability to prioritize risks and follow remediation through toclosure.