Role Overview:
We are looking for a hands-on Information security manager who can lead, manage, and continuously improve security controls across our environment. You will play a critical role in internal and external audits, identifying security risks, reviewing processes, analyzing vulnerabilities and supporting the overall security practices in the organisation. The ideal candidate has a deep understanding of SOC best practices and audit requirements.

Key Responsibilities :
Audits
Conduct internal audits
Reviewing requested exceptions to Information Security Policies, Standards and Procedures
Periodic review of policies, procedures, process flows, and supporting documentation
Facilitate and plan for SOC 1 & SOC 2 audits.
Facilitate and plan for third party audits requested by customers
Manage vendor compliances
Providing guidance in conducting Business Continuity Planning (BCP)/Disaster Recovery (DR) tests periodically
Manage and plan for external VAPT
Reviewing requested exceptions to Information Security Policies, Standards and Procedures
Own and facilitate steering committee meetings
Risk assessment and mitigation
Conducting and monitoring security awareness trainings, and reviewing the information security awareness and training program for staff
Identify improvement areas and plan for completion




Facilitate access management reports (Access Recon) to ensure that only authorized users have access to sensitive data, systems, and facilities

Minimum Qualifications
Technical Skills
o5-8 years in an Information Security Manager or related role.
oUnderstanding of SOC, ISO and other certifications.
oLed end-to-end SOC 1 Type 2 and SOC 2 Type 2 attestation engagements, managing control scoping, risk assessments, evidence collection, and auditor walk-throughs

Education
oBachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (preferred; equivalent experience considered).
Certifications (preferred in each category; not required)
oSecurity: CISM, CISA
Soft Skills
oClear, concise communicator able to translate technical risk to non-technical stakeholders.
oProven collaborator across technical, operations, and compliance teams.
oComfortable leading cross-functional projects.
oProblem solving skills, and analytical ability
oSelf-starter who thrives in a fast-moving, high-autonomy setting.

Nice-to-Have Experience.
Good understanding of the IR process and able to assist in incident response (e.g.: experience on IR teams or DFIR responsibilities).

📌 Information Security Manager (Navi Mumbai)
🏢 Quess IT Solutions
📍 Navi Mumbai