Job SummaryService Delivery & Operations

- Own end-to-end delivery of security services (vulnerability assessment and penetration testing, threat management, identity and access management, SOC/monitoring, GRC services) against defined SLAs, KPIs, and quality benchmarks.
- Establish and mature the security delivery function, including staffing, onboarding, training, shift management, audit readiness, and governance cadences.
- Supervise and coordinate response to high-severity security incidents across regions, ensuring service availability with minimal delay and business impact, and driving post-incident reviews and corrective actions.
- Drive continuous improvement of delivery processes covering risk management, access control, change management, log management, backup and restoration, and SLA management.

Client & Stakeholder Management

- Act as the primary escalation point for clients and internal business stakeholders on security service matters.
- Chair periodic service reviews and executive meetings to present security posture, open risks, incident trends, and progress on key initiatives.
- Manage contract and scope discussions, support RFP responses, solutioning, effort and cost estimation, and transition planning for current engagements.
- Own P&L; or budget accountability for the delivery portfolio, identifying opportunities to grow revenue and optimize cost of delivery.

Technical & Advisory Leadership

- Provide technical direction to security architects, SOC analysts, penetration testers, and engineers; review complex security solutions and designs.
- Ensure delivery aligns with security frameworks and regulatory requirements such as ISO 27001, PCI-DSS, NIST CSF, CIS Controls, and GDPR/data-privacy obligations.
- Guide adoption of secure practices across on-premises and cloud environments (AWS/Azure/OCI), including cloud security posture, identity, and workload protection.




- Contribute to the development and upkeep of security policies, standards, SOPs, and business continuity/disaster recovery plans.

People Leadership

- Build, mentor, and retain high-performing security teams; define career paths, certification roadmaps, and skills development plans.
- Scale teams rapidly for new engagements while maintaining quality - including hiring, training, and knowledge management.
- Foster a culture of ownership, continuous learning, and operational excellence.

Required Qualifications & Experience

- Bachelor's degree in Computer Science, IT, or related field (Master's degree preferred).
- 12+ years of overall experience in IT/Information Security, including 5+ years managing security service delivery, SOC operations, or managed security services.
- Demonstrated technical exposure across multiple cybersecurity domains: security operations and incident management, vulnerability assessment and penetration testing, infrastructure/network security, cloud security, identity and access management, and GRC.
- Working knowledge of security standards and regulations: ISO 27001, PCI-DSS, CIS Controls, NIST, GDPR.
- Proven experience managing large, multi-skilled teams (security architects, analysts, testers) and delivering against SLAs in a client-facing or shared-services model.
- Strong commercial acumen: experience with SLAs, service reviews, effort estimation, RFPs, and budget/P&L; management.
- Excellent communication skills with the ability to engage both engineers and C-level executives.

Preferred Certifications

- One or more of: CISSP, CISM, CCSP/CCSK, CISA, ISO 27001 Lead Auditor/Implementer.
- Technical certifications such as CEH, cloud security certifications (AWS/Azure/OCI security), or ITIL for service management are an advantage.

Key Responsibilities

(Repeated content, already included under Job Summary)

Skill Requirements

(Repeated content, already included under Job Summary)

Other Requirements

(Repeated content, already included under Job Summary)

📌 Tower Lead - NESSUS, Compliance Remediation (India)
🏢 HCL Technologies
📍 India