Manager - Information Security

Department: Technology

Reporting To: SVP - Technology

Location: New Delhi

Role Overview The Manager - Information Security will be responsible for establishing and managing the organization's information security framework. The role will lead ISO 27001 certification,

drive information security operations, and manage internal and external audits while ensuring compliance with applicable regulatory requirements.

The ideal candidate will have strong experience in information security operations,

compliance, ISO 27001 implementation, and audit management.

Key Responsibilities

ISO Certification & Compliance

Own the end-to-end ISO 27001 ISMS implementation and certification lifecycle,

from gap assessment through certification and surveillance audits.

Coordinate with certification bodies and internal stakeholders to ensure audit readiness.

Track and close non-conformities and maintain audit documentation and corrective action plans.

Ensure compliance with applicable regulations, including the IT Act, DPDP Act, and

CERT-In advisories.

Security Operations

Manage day-to-day information security operations, including threat monitoring,

incident response, and vulnerability management.

Administer security tools such as SIEM, Endpoint Protection, WAF, IAM, and DLP solutions.

Define and enforce security baselines across cloud infrastructure and API environments.





Collaborate with engineering teams to integrate security practices into the software development lifecycle (DevSecOps).

Risk Management & Governance

Conduct periodic risk assessments and maintain a risk register with mitigation plans.

Develop, review, and maintain information security policies, standards, and procedures.

Perform security assessments for third-party vendors and partners.

Report security metrics and risk posture to senior leadership.

Audit Management

Plan and execute internal information security audits across systems, processes, and integrations.

Coordinate with external auditors and regulatory bodies during audit engagements.

Maintain audit trails and compliance evidence repositories.

Prepare management review reports and security posture updates for leadership.

Candidate Profile

Experience 8-10 years of experience in Information Security, including hands-on ownership of

ISO 27001 implementation and audit cycles.

Strong experience in security operations, including SOC management, incident response, and vulnerability management.

Good understanding of cloud security (AWS, Azure, or GCP) and API security principles.

Certifications

ISO 27001 Lead Implementer or Lead Auditor.

CISSP and/or CISM certification preferred.

Skills Strong communication and stakeholder management skills.

Ability to work effectively with both technical teams and senior leadership.

Robust analytical, governance, and risk management capabilities.

📌 Manager-Information Security (Delhi)
🏢 Promaynov Advisory Services
📍 Delhi