Key Deliverables (Essential functions & Responsibilities of the Job):

- Lead the design, implementation, and continuous improvement of the enterprise-wide ISMS and PIMS programs.
- Develop and manage the InfoSec strategy aligned with business goals and regulatory requirements (ISO 27001:2022, ISO 27701:2019, DPDPA, IT Act, CERT-In).
- Oversee security risk assessments, audits, and remediation plans across IT and business units.
- Manage a team of security professionals; mentor, coach, and evaluate performance.
- Collaborate with cross functional stakeholders to ensure security by design.
- Lead incident response, RCA, and post-mortem reviews.
- Drive security awareness and training programs across the organization.
- Manage security budgets, vendor relationships, and contract negotiations.

Skills:

- Expertise in QRadar, GTB DLP, CyberArk PAM, Wiz CNAPP, SentinelOne EDR, Qualys VA, and PT tools.
- Cloud security governance experience (AWS, Azure; GCP optional).
- Strong knowledge of MITRE ATT&CK;, NIST CSF, CIS Controls, OWASP Top 10.
- Strategic mindset and strong stakeholder management.
- Proven team leadership and excellent communication.
- Robust documentation and reporting skills.

📌 Manager - IT Security (Gurugram)
🏢 Marks And Spencer
📍 Gurugram