Job Summary

We are looking for an experienced Information Security Lead to own and strengthen the organization’s information security, risk, compliance, and data protection initiatives. The role will work closely with Engineering, IT, Product, HR, and leadership teams to ensure a robust security posture across applications, infrastructure, processes, and people.

Key Responsibilities

Lead and manage the organization’s overall Information Security program.
Develop, implement, and maintain security policies, standards, procedures, and controls.
Drive ISO 27001 compliance, audits, and continuous improvement initiatives.
Manage risk assessments, vulnerability assessments, penetration testing, and security audits.
Establish and monitor security controls across cloud infrastructure, applications, endpoints, networks, and data.
Lead Security Incident Response, investigation, and remediation activities.
Own Business Continuity & Disaster Recovery (BCP/DR) planning, testing, and improvements.
Ensure compliance with applicable data protection and privacy regulations,



including DPDP requirements.
Conduct security reviews of applications, APIs, vendors, and third-party integrations.
Manage Third-Party/Vendor Risk Management and security due diligence.
Define and track security KPIs, KRIs, risks, and remediation plans.
Conduct security awareness and information security training for employees.
Work with engineering teams on secure SDLC, DevSecOps, application security, and cloud security practices.
Coordinate with external auditors, customers, partners, and regulatory stakeholders on security requirements.
Stay updated on emerging security threats, vulnerabilities, and industry best practices.

Required Skills & Experience

7–10 years of experience in Information Security / Cybersecurity / GRC.
Strong understanding of ISO 27001, SOC 2, risk management, and security controls.
Hands-on experience with VAPT, vulnerability management, incident response, and security audits.
Good u

📌 Infosec (Gurugram)
🏢 OnGrid
📍 Gurugram