Designation - Senior Manager - Cybersecurity and Data Privacy

Location - Plot No. 221, Udyog Vihar - I, Gurgaon, Haryana

Experience - 8 - 12 Years

Education - MS in Cybersecurity or any relevant experience

Job Description

- Excellent communication, stakeholder management, and presentation skills with the ability to influence executive leadership and board members on cybersecurity and data privacy matters.
- Develop, implement, and continuously enhance the enterprise Information Security Strategy, ensuring alignment with business objectives, digital transformation initiatives, and organizational risk appetite.
- Establish and maintain an enterprise-wide Information Security Governance framework, including security policies, standards, procedures, and cybersecurity risk management practices.
- Lead the organization's Data Protection and Privacy Program as the designated Data Protection Officer (DPO), ensuring compliance with the Digital Personal Data Protection (DPDP) Act, 2023, and other applicable privacy regulations.
- Ensure compliance with industry standards and regulatory requirements, including ISO/IEC 27001, ISO 27701, NIST Cybersecurity Framework, CERT-In Directions, RBI/SEBI guidelines (where applicable), and other statutory or customer-specific security requirements.
- Lead enterprise-wide cyber risk assessments, security audits, penetration testing, vulnerability assessments, third-party/vendor security reviews, and compliance assessments, ensuring timely closure of identified risks.
- Oversee Security Operations Centre (SOC), SIEM,



Endpoint Detection & Response (EDR/XDR), Identity & Access Management (IAM), Privileged Access Management (PAM), Data Loss Prevention (DLP), Cloud Security, Email Security, Web Security, and Security Monitoring functions.
- Lead the organization's Cyber Incident Response and Crisis Management program, including ransomware preparedness, digital forensics, business continuity, disaster recovery coordination, and regulatory breach reporting.
- Define and implement secure architecture principles for on-premises, cloud, SaaS, OT/IoT, and hybrid environments by adopting Secure-by-Design and Zero Trust security models.
- Drive cybersecurity initiatives across application security, DevSecOps, infrastructure security, endpoint security, network security, and cloud security throughout the technology lifecycle.
- Develop and maintain enterprise security metrics, dashboards, and Key Risk Indicators (KRIs), providing periodic reports and strategic recommendations to senior management, the Audit Committee, and the Board.
- Lead third-party risk management, including security due diligence for vendors, partners, cloud service providers, and outsourced service providers.
- Promote a solid security culture by designing and delivering organization-wide cybersecurity awareness, phishing simulation, and secure behaviour training programs.
- Continuously evaluate emerging cyber threats, security technologies, and regulatory developments to enhance the organization's cybersecurity maturity, resilience, and overall security posture.

📌 Senior Manager Cybersecurity and Data Privacy (Gurugram)
🏢 Sar Group
📍 Gurugram