Lead Information Security and Data Privacy

As a Lead Information Security & Privacy, you will function as an individual contributor tasked with steering the organisations GRC objectives. This role involves providing technical oversight and regulatory alignment for complex systemsincluding cloud environments and AI initiativesto safeguard the

Confidentiality, Integrity, and Availability (CIA) of organizational and client data.

Key Responsibilities:

- Strategic Risk Assessment: Perform deep-dive security and privacy risk assessments on critical data assets and digital estates, identifying vulnerabilities and architecting advanced technical controls to mitigate threats.
- Contractual Review: Conduct comprehensive reviews of information security and data privacy provisions within client and supplier agreements, including Data Processing Agreements (DPAs), to ensure alignment with organizational policy and legal obligations.
- Regulatory Compliance: Ensure adherence to global data protection laws and privacy frameworks by architecting and sustaining rigorous controls designed to protect personal data.
- Compliance Oversight: Strategize and manage comprehensive compliance activities, including assessments, audits, testing, and remediation, to standards such as ISO 27001, ISO 27701, SOC 2 Type 2, GDPR, and HIPAA.
- Audit Management: Spearhead the end-to-end lifecycle of internal and external security audits, driving readiness, coordination,



and remediation to ensure continuous compliance with standards such as ISO 27001, SOC 2, and other relevant regulatory frameworks.
- Strategic Communication: Provide communication regarding security objectives, strategic initiatives, and organizational programs to both departmental leadership and the broader workforce.
- Business Support: Act as the primary point of contact for information security and data privacy inquiries during the sales cycle, including managing RFPs, client security questionnaires, and detailed security assessments.
- Incident Response: Direct investigations into security incidents, maintaining thorough documentation of findings and facilitating the expedient resolution and remediation of issues in partnership with stakeholders.

Required Qualifications, Skills, and Competencies:

- Bachelor's degree in Computer Science, Information Systems, or an allied discipline.
- A degree in Law or a relevant legal qualification is preferred, given the focus on contractual reviews and regulatory compliance.
- 7+ years of experience in the domains of information security and privacy.
- Proficiency or skilled certification in frameworks such as ISO 27001, ISO 27701, or equivalent cybersecurity standards.
- Familiarity in risk concepts for AI deployments and Large Language Models (LLMs) will be an advantage.

Note: The title will be determined based on aspects such as years of relevant experience, skills, type of responsibilities handled, etc.

📌 Information Security and Data Privacy - Lead (Chennai)
🏢 Tiger Analytics
📍 Chennai