12 Aug
|
Friends Color Images
|
Noida
12 Aug
Friends Color Images
Noida
Broad Function:
The Information Security Manager will be responsible for developing, implementing, and maintaining the organization’s information security strategy, risk framework, policies, and controls. This role requires deep expertise in cyber operations, audit management, risk evaluation, and compliance with security standards such as ISO 27001, SOC 2, and NIST.This is not a coordination-only role.
The role demands hands-on ownership to get things done end-to-end by working closely with Engineering, DevOps, IT, HR, Operations, and Management. The primary objective of this role is to deliver measurable security outcomes, including certifications, audit closures, hardened systems, and sustained compliance.
Key Roles & Responsibilities (Not Limited To)
1. Information Security Governance & Policy Management:
- Define, develop, implement, and continuously improve information security policies, standards, procedures, and guidelines.
- Own and maintain the Information Security Management System (ISMS) aligned with ISO 27001.
- Establish governance frameworks to ensure consistent security implementation across:
- Corporate IT
- Product engineering
- Cloud infrastructure
- Manufacturing/plant environments (IT/OT)
- Ensure alignment with ISO 27001, SOC 2, PCI DSS, GDPR, and client-specific security requirements.
- Act as the primary point of contact for information security governance across business units.
2. Risk Management, Compliance & Audit Ownership:
- Conduct periodic enterprise risk assessments, threat modeling, and vulnerability assessments across IT, cloud, product, and plant systems.
- Maintain and continuously update:
- Risk registers
- Asset inventories
- Control matrices
- Compliance dashboards
- Lead and independently manage:
- ISO 27001 certification and surveillance audits
- SOC 2 Type I & II audits
- PCI DSS compliance assessments
- Client and partner security audits
- Coordinate audit schedules, evidence collection, documentation, and stakeholder i
📌 Information Security Manager (Noida)
🏢 Friends Color Images
📍 Noida