Role Overview

We are looking for a hands-on Information security manager who can lead, manage, and continuously improve security controls across our workplace. You will play a critical role in internal and external audits, identifying security risks, reviewing processes, analyzing vulnerabilities and supporting the overall security practices in the organisation. The ideal candidate has a deep understanding of SOC best practices and audit requirements.

Key Responsibilities

Audits

Conduct internal audits

Reviewing requested exceptions to Information Security Policies, Standards and Procedures

Periodic review of policies, procedures, process flows, and supporting documentation

Facilitate and plan for SOC 1 & SOC 2 audits.

Facilitate and plan for third party audits requested by customers

Manage vendor compliances

Providing guidance in conducting Business Continuity Planning (BCP)/Disaster Recovery (DR) tests periodically

Manage and plan for external VAPT

Reviewing requested exceptions to Information Security Policies, Standards and Procedures

Own and facilitate steering committee meetings

Risk assessment and mitigation

Conducting and monitoring security awareness trainings, and reviewing the information security awareness and training program for staff

Identify improvement areas and plan for completion





Facilitate access management reports (Access Recon) to ensure that only authorized users have access to sensitive data, systems, and facilities

Minimum Qualifications

Technical Skills o5-8 years in an Information Security Manager or related role.

oUnderstanding of SOC, ISO and other certifications.

oLed end-to-end SOC 1 Type 2 and SOC 2 Type 2 attestation engagements, managing control scoping, risk assessments, evidence collection, and auditor walk-throughs

Education oBachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (preferred; equivalent experience considered).

Certifications (preferred in each category; not required)

oSecurity: CISM, CISA

Soft Skills oClear, concise communicator able to translate technical risk to non-technical stakeholders.

oProven collaborator across technical, operations, and compliance teams.

oComfortable leading cross-functional projects.

oProblem solving skills, and analytical ability oSelf-starter who thrives in a fast-moving, high-autonomy environment.

Nice-to-Have Experience.

Good understanding of the IR process and able to assist in incident response (e.g.: experience on IR teams or DFIR responsibilities).

📌 Information Security Manager (Mumbai)
🏢 Quess IT Solutions
📍 Mumbai