Security Manager jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis — full-time, permanent, immediate joining, based at our New Delhi HQ inside the security practice that operates the S3-SENTINEL platform for government and sovereign clients across 18 countries. This is a hands-on management role: you own the security posture of live engagement infrastructure, the policies deployments run under, and the incident-response discipline behind a 15+ year zero-incident record. Below is the complete job description — the responsibilities you will own from day one, the requirements, the seniority path, and the selection process.

LOCATION New Delhi (HQ)

EMPLOYMENT Full time · Permanent

AVAILABILITY Immediate · Rolling intake

COMPENSATION Discussed at screening

TRACKS ON THIS DESK25

CRAFT SKILLS NAMED12

TOOLS & SYSTEMS5

PATH STAGES4

01 01The actual work What will you actually do as a Security Manager at CryptoMize? 01 Own security governance for a portfolio of client engagements — policies, procedures, and the audit trail that proves both are followed 02 Run the risk-assessment programme: threat modelling, control mapping against ISO 27001 and NIST CSF, and the residual-risk decisions leadership signs against 03 Lead incident response on your engagements — severity calls, escalation, forensics coordination, and the client communications that keep trust intact 04 Manage compliance workstreams for government and enterprise clients: audit preparation, evidence packages, and gap remediation with named owners and dates 05 Direct and develop the security analysts attached to your engagements, including the intern bench — the teaching culture is the promotion path 06 Report posture to client C-suites in plain language: what is protected, what is exposed, what it costs, and what you recommend — with the evidence behind every claim ROLE RESPONSIBILITIES As a Security Manager at CryptoMize you will own the security posture of live engagement infrastructure: the policies, the assessments, the monitoring, and the response. The role exists because our clients — governments, political entities, enterprises across 18 countries — do not accept security theatre; every control must be demonstrable, every exception must carry a named owner and an expiry date, and every incident review must produce a change.



The managerial weight of the role sits in judgment: which residual risks leadership must see, which findings cannot wait for the weekly review, and how an engagement absorbs a client mandate without diluting the baseline. You will run tabletop exercises your analysts complain about and later credit, and you will write the post-incident reports that read like engineering documents rather than apologies. Institution-building is a standing duty: the security practice grows through its teaching culture, so mentoring the analyst bench and the intern programme is part of the role definition, not a favour. The managers whose benches produce strong analysts are the ones the practice promotes first. 02 02Capability profile What skills and tools does a Security Manager need? astro-island,astro-slot,astro-static-slot{display:contents} Craft skills12 Tools & systems5 Offer standards4 Security governance — policy architecture that survives audits and incidents alikeRisk management — quantitative judgment, control mapping, residual-risk ownershipIncident command — severity classification, escalation discipline, post-incident reviewDeep working knowledge of ISO 27001 and the NIST Cybersecurity FrameworkCompliance programme management — evidence pipelines, not scramble-and-hopeSIEM operations leadership — tuning, detection coverage, and knowing what the console hidesInfrastructure fluency — networks, Linux/Windows estates, cloud and air-gapped patternsTeam leadership and mentorship of analysts and internsExecutive communication — translating technical exposure into board-grade decisionsVendor and tooling judgment — build, buy, and when to trust neitherDiscretion at NDA and sovereign-client grade (non-negotiable)Calm under live-incident pressure, proven not claimed SIEM platforms (Wazuh / Splunk-class)



at operations-leadership levelISO 27001 & NIST CSF control cataloguesVulnerability management suites (OpenVAS / Tenable-class)Grafana for posture and metrics reportingIncident-response runbooks and tabletop facilitation Depth of demonstrated skill in the specific role disciplineClassification and scope of the client engagement the role supportsUrgency and time-sensitivity of active project requirementsTrack record built across CryptoMize engagements Also known as: security manager jobs · infosec manager vacancy · security lead · information security manager 03 03Seniority ladder Security Manager — seniority path at CryptoMize The security practice promotes by posture defended and incidents handled well, not tenure. The ladder below is how engagement security is actually organized. Security Manager Owns governance, risk, and incident response for one to two engagement portfolios. The accountability layer between analysts and the practice lead. 1/4 Senior Security Manager Runs security for an entire client vertical, designs the compliance programmes others execute, and fronts the hardest client briefings. 2/4 Security Practice Lead Owns S3-SENTINEL operations end-to-end — staffing, standards, the zero-incident record, and final accountability for every posture claim CryptoMize makes. 3/4 Chief Security Advisor The crossover track: managers who graduate into sovereign-client counsel, shaping national-grade security architecture rather than one engagement at a time. 4/4 04 04The engagement surface CryptoMize work a Security Manager touches Every role plugs into live engagements across the five Penta-P domains — these are the services your work feeds. Security Manager · Job Opening This seat plugs into 6 live CryptoMize services across the five Penta-P domains — the work below is where yours lands. 6 SERVICESPENTA-P Information Security Security Consultancy Penetration Testing Vulnerability Assessment Infrastructure Security Security Training WHAT DOES SECURITY MANAGER COMPENSATION DEPEND ON? Compensation is discussed during screening — never a fixed public figure, because it varies per person and per engagement. It depends on: # OFFER CONSTRUCTION FACTOR 01 Depth of demonstrated skill in the specific role discipline 02 Classification and scope of the client engagement the role supports 03 Urgency and time-sensitivity of active project requirements 04 Track record built across CryptoMize engagements

📌 Security Manager (India)
🏢 Crypto Mize
📍 India