Senior Specialist - Information Security

Acies Consulting; Mumbai; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

Acies Consulting in Mumbai is seeking a senior information security leader to design and drive the product security program. You will oversee threat intelligence, vulnerability management and incident response while aligning with regulatory requirements.

The role requires 7+ years in security, with at least 5 years in leadership. You will build policies, lead a team of security professionals, and collaborate with global stakeholders across India, Europe, APAC and US.

Qualifications

• 7+ years of experience in a cybersecurity leadership role.
• Strong understanding of OWASP, CVSS, NIST CSF, ISO 27001.
• Experience with AWS, Azure and GCP security practices.

Responsibilities

• Develop and implement a comprehensive information security strategy aligned to objectives and regulatory requirements.
• Lead initiatives across threat intelligence, vulnerability management, incident response and data protection.
• Conduct security and risk assessments to identify and mitigate risks across the business.
• Develop and maintain security policies, standards and procedures.
• Oversee security controls implementation and maintenance.
• Lead incident response including containment, investigation and remediation.
• Build relationships with internal and external stakeholders.
• Ensure compliance with security regulations and best practices.
• Manage client security-related inquiries and communications.
• Manage and build a team of security professionals.

Skills

Leadership

Threat intelligence

Vulnerability mgmt

Cybersecurity frameworks

Cloud security

Project management

Communication

Education

Graduate/PG

Job description

Highlight Of The Engagement Opportunity

Nature of role : Full time

Number of years of experience expected : 7+ years of experience in similar role, with at least 5 years in a leadership role.

Areas of past experience preferred : Strong understanding of frameworks and standards (e.g., OWASP, CVSS, NIST Cybersecurity Framework, ISO 27001). Experience with cloud security best practices (e.g., AWS, Azure, GCP).

• Strong knowledge of threat intelligence and vulnerability management.
• Strong leadership, organizational, and problem-solving skills.

Educational qualification required : Graduate/ Postgraduate

Additional certifications preferred : Relevant cybersecurity certifications (e.g., CISSP, CISM, CISA) are preferred.

Preferable additional certifications : PMP

Preferred geography of previous work experience : India / Europe / APAC / US

Language requirements : Ability to write and speak fluently in English

Key Responsibility Areas

• Develop and implement a comprehensive information security strategy for the product aligned to business objectives and regulatory requirements.
• Lead and manage initiatives related to company's security program including threat intelligence, vulnerability management, incident response, and data protection.
• Conduct security assessments and risk assessments to identify, analyze, and mitigate security risks across all areas of the business.
• Develop and maintain security policies, standards, and procedures.
• Oversee the implementation and maintenance of security controls.
• Lead incident response activities, including containment, investigation, and remediation.
• Build and maintain strong relationships with internal and external stakeholders.
• Ensure compliance with relevant security regulations and industry best practices.
• Respond to the customer ask associated with the Product security policy.
• Manage client communications and interactions related to information security related asks and issues.
• Manage and build a team of security professionals.

Other Important Information

• Work permit requirements : Either Indian Citizen or having valid work permit to work in India
• Period of engagement : Full-time position
• Probation period : 6 months
• Compensation : Compensation varies depending on the skill, fitment and role played by the person. Compensation discussions will take place post the selection process.
• Performance incentives : Typically, all roles at Acies have a performance incentive. Specific aspects will be discussed during the compensation discussion.
• Leave : 19 working days a year. Additional leaves for national holidays, sick leaves, maternity and paternity, bereavement and studies vary based on the city and country of engagement.
• Other benefits : Other employment benefits including medical insurance will be informed during the compensation discussion.
• Career growth for full-time roles : Acies believes in a transparent and data-based performance evaluation system. You are encouraged to clarify any questions you have with respect to career growth with Acies personnel you interact with during the selection process.
• Career opportunities for part-time roles : Conversion of part-time roles to full-time roles depends on both performance of the individual and business needs. You are encouraged to ask about the prospects as you interact with Acies personnel during the selection process.
• Global mobility : Acies encourages mobility across our offices. Such mobility is, however, subject to business needs and regulations governing immigration and employment in various countries.

Selection Process

We seek to be transparent during the selection process. While the actual process may vary from the process indicated below, the key steps involved are as follows :

• Interview : There are expected to be at least 3 rounds of interviews. The number of interview rounds may increase depending on the criticality and seniority of the role involved.
• Final discussion on career and compensation : Post final selection, a separate discussion will be set up to discuss compensation and career growth. You are encouraged to seek any clarifications you have during this discussion.