Job Details
The Role:
The Manager — Information Security and Compliance operate and matures our company-wide security, risk, and compliance program across the US and Europe. You'll lead a small team, own the security budget, drive cloud and Kubernetes security, run our audit and certification programs, and bring creative ideas that move our posture forward year over year.

The Work :

• Lead the information security and IT risk program; report posture, KPIs, and incidents to the CIO and senior leadership.
• Own Azure security — Defender for Cloud, Entra ID with Conditional Access policies (risk-based sign-in, device compliance, phishing-resistant MFA / FIDO2 / passkeys, session controls, break-glass hygiene) and PIM, Key Vault, and Azure Policy.
• Drive the Microsoft 365 Defender suite (MDE, MDO, MDI, MDCA), Microsoft Purview (DLP, Information Protection), and Microsoft Sentinel (SIEM/SOAR).
• Own Kubernetes and container security — admission control, image signing, runtime protection, secrets management — plus DevSecOps (SAST/DAST/SCA, IaC scanning, secure SDLC).




• Run a comprehensive SBOM program (SPDX / CycloneDX, VEX) and supply-chain controls aligned to SLSA and NIST SSDF.
• Own vulnerability management on Tenable (Tenable.io / sc / WAS) — scan coverage, SLA-driven remediation, EPSS / KEV-based prioritization, exception workflow.
• Drive web application security testing with Burp Suite Professional / Enterprise — authenticated scans, manual exploitation, API testing, and CI/CD integration; oversee external penetration testing engagements end-to-end (scoping, vendor management, finding triage, retesting, reporting).
• Run SOC 1 / SOC 2 Type II programs end-to-end with external auditors.
• Lead US regulatory compliance — SOX ITGC, HIPAA / HITECH, GLBA, CCPA / CPRA + state privacy laws, NYDFS Part 500; track FedRAMP / StateRAMP readiness.
• Lead European compliance — EU and UK GDPR (DPIAs, ROPAs, SCCs / UK IDTA), NIS2, and DORA readiness for in-scope clients.
•

📌 Manager — Information Security and Compliance (Noida)
🏢 apexanalytix
📍 Noida