Vice President - Global Head of Information Security

RateGain; India; On-site; INR 2,500,000 - 3,500,000; Full time

Job summary

RateGain is looking for an experienced Head of Information Security and Data Privacy to lead security efforts across cloud and application environments. This role demands a comprehensive strategy to ensure compliance with regulations like GDPR and PCI DSS.

Qualified candidates should have over 18 years of experience, including familiarity with security frameworks such as ISO/IEC 27001. You will develop incident response plans and oversee security assessments to safeguard enterprise-level data.

Qualifications

• 18+ years of experience in information security.
• Proven expertise in enterprise strategies and technology risk management.
• Familiarity with ISO/IEC 27001 and NIST frameworks.

Responsibilities

• Lead information security at the enterprise level.
• Ensure compliance with ISO, SOC, and PCI DSS.
• Conduct security assessments and audits for cloud environments.
• Develop incident response plans for cloud and application security.
• Oversee GDPR and CCPA compliance programs.

Skills

Information security management

Data Privacy Compliance (GDPR, CCPA)

Cloud security practices

Application security strategies

Incident response planning

Security assessments and audits

Education

Relevant Bachelor's or Master's degree

Tools

Security automation tools

Job description

Head of Information Security and Data Privacy

We are seeking Head of Information Security and Data Privacy, who will take the helm in leading the following:

Key Objectives and Responsibilities

1) Information security at the enterprise level, encompassing both application security and cloud security.

2) Certification Compliance for standards such as ISO, SOC, PCI DSS.

3) Data Privacy. GDPR and CCPA readiness and compliance.

Cloud Security

Design, implement, and manage security measures for cloud-based infrastructure, ensuring the confidentiality, integrity, and availability of data.

Conduct regular security assessments and audits of cloud environments to identify and remediate vulnerabilities.

Collaborate with cross-functional teams to integrate security best practices into cloud-based solutions.

Application Security

Develop and implement strategies for securing applications throughout the software development lifecycle (SDLC).

Conduct code reviews and provide guidance to development teams on secure coding practices.

Perform application security assessments, penetration testing, and vulnerability assessments.

Identity and Access Management (IAM)

Incident Response and Threat Detection

Develop and implement incident response plans for cloud environments and applications.

Monitor and analyze security logs to detect and respond to security incidents in a timely manner.

Security Compliance

Ensure compliance with industry standards and regulations related to cloud security and application security.

Work with internal and external auditors to demonstrate compliance with security policies and procedures.

Security Automation

Implement and maintain security automation tools and scripts to streamline security processes.

Identify opportunities for automation to enhance the efficiency and effectiveness of security operations.

Data Privacy

Lead and oversee the implementation and maintenance of GDPR and CCPA compliance programs.

Conduct thorough assessments to ensure alignment with the regulatory requirements and address any gaps.

Conduct PIAs to identify and address potential privacy risks associated with data processing activities.

Provide recommendations for mitigating privacy risks and ensuring compliance with regulations.

Education & Work Experience

- 18+ years of experience.

- Experience with a global footprint.

- Proven expertise in developing and implementing enterprise strategies and programs for the effective management of information and technology risks.

- Familiarity with common information security management frameworks, including ISO/IEC 27001 and NIST.