Senior Manager Information Security

InterGlobe Enterprises; Gurugram District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

InterGlobe Enterprises invites applications for an Information Security Manager to drive enterprise-wide security strategy, governance, and operations. You will lead cross-functional teams, architect security controls, and ensure robust incident response across 24x7 operations.

The role requires deep expertise in cloud and on-prem security, SIEM, and compliance frameworks. The ideal candidate holds 12–14 years in information security and excels at stakeholder communication, risk assessment, and

Qualifications

• Bachelor's degree in Information Technology or Computer Science.
• 12 to 14 years of information security experience.
• Strong cloud security knowledge across AWS, GCP, and Azure.
• Proficiency with SIEM platforms such as ArcSight, QRadar, or Splunk.
• Hands-on experience with EDR, DLP, encryption, and vulnerability management.
• Experience implementing ISO 27001, PCI-DSS, DPDP, and GDPR frameworks.
• Excellent communication skills to coordinate with stakeholders across the organization.

Responsibilities

• Serve as primary point of contact for information security with internal teams, external partners, and customers.
• Lead security strategy, architecture, and enterprise framework development.
• Oversee security operations, monitoring, and tool maintenance.
• Develop and maintain incident response playbooks and IRPs.
• Conduct internal audits against ISO 27001 and PCI-DSS.
• Deliver information security awareness training.

Skills

Cloud security

SIEM expertise

EDR & DLP

Vulnerability management

NIDS/NIPS

Forensics

Encryption

ISO 27001

PCI-DSS

Education

Bachelor's degree in IT/CS

Tools

ArcSight

QRadar

Splunk

Job description

The Information Security Manager will serve as the organization's subject-matter expert for cybersecurity protection, detection, response, and recovery. This role is accountable for guiding the design, implementation, and continuous improvement of an enterprise-wide security framework, and for acting as the primary point of contact for information security matters across internal teams, external partners, and customers.

Key responsibilities:

Stakeholder & Team Leadership

• Serve as the primary point of contact between the internal information security team, external security partners, and customers/business stakeholders.
• Manage internal and external security team members, including third-party security service providers.
• Communicate information security goals, initiatives, and new programs clearly and effectively to department managers and other stakeholders across the organization.

Security Strategy & Architecture

• Guide the IT function and other business units in developing, evolving, and maintaining a comprehensive enterprise security framework.
• Lead the development of baseline infrastructure and application hardening guides based on industry best practices, providing leadership and expertise on current security solutions and configurations.
• Assess business processes, technology, and IT architecture at the logical, system, and component levels to evaluate risk posture and determine appropriate security models and controls.
• Evaluate vendor and internal products for security capabilities and integration into the organization's computing environment, ensuring alignment with business objectives and responsiveness to evolving trends.
• Evaluate new and emerging security technologies and stay current with industry trends and developments.
• Lead the design, implementation, and maintenance of an ISO 27001, PCI-DSS, DPDP, and GDPR compliant security framework.
• Conduct periodic internal assessments against ISO 27001 and PCI-DSS requirements, and guide the team in addressing and closing identified gaps.
• Oversee information security audits, whether performed internally or by third-party assessors.
• Continuously audit policies and controls to ensure ongoing compliance and operational effectiveness.

Security Operations

• Own and maintain security systems and controls, including firewalls, data protection (DLP), patch management, encryption, vulnerability scanning, and penetration testing.
• Ensure round-the-clock (24x7) monitoring of all security operations and infrastructure.
• Maintain all security tools and technologies with support from internal teams and external partners.
• Implement and oversee technology upgrades, improvements, and major changes to the information security environment.
• Develop and maintain a detailed Security Incident Response Program, including playbooks covering detection, containment, eradication, and recovery.
• Partner with departments across the organization to identify, assess, and reduce information security risk.

Awareness & Training

• Design and deliver information security awareness training programs for organizational personnel.

Qualifications & Skills

Education

• Bachelor's degree in Information Technology, Computer Science, or an equivalent discipline.

Experience

• 12 to 14 years of relevant experience in information security / cybersecurity roles.

Technical Expertise

• Strong technical knowledge of the organization's applications, systems, network, and infrastructure.
• Working knowledge of cloud security across AWS, GCP, and/or Azure, along with application and network security.
• Deep understanding of technologies and architecture within highly scalable enterprise networks.
• Strong understanding of logging mechanisms across Windows, Linux, and macOS platforms, along with core networking concepts.
• Hands-on proficiency with EDR, DLP, Anti-Virus, Vulnerability Management, HIPS, NIDS/NIPS, full packet capture, host-based and network-based forensics, and encryption technologies.
• In-depth knowledge of the architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., ArcSight, QRadar, LogLogic, Splunk).
• Demonstrated expertise in developing and executing Incident Response Playbooks (IRPs).

Certifications & Frameworks

• Advanced certifications such as CISSP or CISM are an added advantage.
• Hands-on exposure to Information Security Management Systems such as ISO 27001, NIST CSF, and NCIIPC guidelines is mandatory.

Soft Skills

• Excellent communication skills, with the ability to coordinate effectively across diverse stakeholders within the organization.