Department: Corporate IT

Location: Gurugram / Chennai

Employment Type: Full-Time

Reporting To: Head of IT (with a dotted-line reporting to the CEO)

About The Role

We are looking for a seasoned and proactive Information Security Manager to lead and strengthen the organization's cybersecurity and information security framework across multiple countries, business entities, and industry verticals.

This role is ideal for a highly skilled security professional who can independently drive information security initiatives, oversee security operations, manage cyber risks, ensure regulatory compliance, and build a strong security culture across the organization. The incumbent will play a critical role in safeguarding enterprise systems, networks, applications, and data while ensuring alignment with global security standards and compliance requirements.

The successful candidate will be responsible for establishing, monitoring, and continuously improving the organization's security posture through effective governance, risk management, incident response, security operations, and employee awareness programs.

Key Responsibilities

- Security Monitoring &
- Threat Management
- Continuously monitor and evaluate security controls to protect systems, networks, applications, and business-critical data from unauthorized access, cyber threats, and security breaches.
- Conduct regular security assessments, risk evaluations, and incident analyses to identify vulnerabilities and strengthen cyber defense capabilities.
- Support front line security operations by monitoring network activities and responding to potential threats.
- Stay updated with the latest cyber security trends, threat intelligence, emerging vulnerabilities, and hacker methodologies to proactively identify and mitigate risks.
- Analyze security alerts and incidents, perform root cause analysis, and recommend preventive and corrective actions.
- Risk Assessment, Incident Response &
- IT Audits
- Identify, assess, and evaluate information security risks across infrastructure, applications, and business processes.
- Design and implement effective risk mitigation strategies, including firewalls, encryption technologies, access controls, and other security mechanisms.
- Monitor systems for suspicious or abnormal activities and investigate potential security violations.
- Lead incident response activities, ensuring timely investigation, containment, remediation, and recovery from security incidents.
- Prepare detailed incident reports and recommend long-term preventive measures.
- Conduct periodic IT security audits to identify control gaps, policy violations, vulnerabilities, and operational inefficiencies.
- Drive corrective action plans and ensure closure of audit findings within defined timelines.
- Security Governance, Access Control &
- Infrastructure Security
- Manage identity and access management (IAM) processes, user privileges, authorization controls, and resource access in accordance with organizational policies.
- Establish and maintain robust security governance practices and control frameworks.
- Evaluate the organization's existing security architecture and recommend enhancements to improve overall cyber security maturity.
- Implement and maintain security standards, policies, procedures, and best practices across the organization.
- Oversee system upgrades, security patch management, and infrastructure hardening activities.




- Ensure security controls remain effective and aligned with evolving business and threat landscapes.
- Web Security, Vulnerability Management &
- SOC Operations
- Perform web application security assessments and testing to identify vulnerabilities and security weaknesses.
- Develop and execute remediation plans to address identified risks and vulnerabilities.
- Conduct vulnerability assessments and coordinate mitigation activities across enterprise systems and applications.
- Support Security Operations Center (SOC) functions, including threat monitoring, event correlation, incident investigation, and response activities.
- Utilize SIEM platforms for security monitoring, threat detection, analysis, and reporting.
- Collaborate with Red Teams and Blue Teams to enhance threat detection, response capabilities, and overall security effectiveness.
- Participate in threat hunting, forensic investigations, and proactive cyber security initiatives.
- Security Awareness &
- Employee Enablement
- Develop, implement, and manage organization-wide information security awareness programs.
- Conduct training sessions on cyber security best practices, risk management, incident reporting, and security compliance requirements.
- Promote a culture of security awareness across all business functions and geographical locations.
- Ensure employees understand their responsibilities in maintaining information security and protecting organizational assets.
- Compliance, Reporting &
- Stakeholder Management
- Prepare and present comprehensive security reports, dashboards, risk assessments, audit findings, and incident summaries to senior leadership.
- Communicate security posture, risk exposure, remediation status, and key initiatives to stakeholders.
- Maintain security policies, procedures, standards, documentation, and compliance records.
- Ensure compliance with applicable regulatory and industry standards, including GDPR, PCI-DSS, ISO 27001, and other relevant frameworks.
- Support internal audits, external audits, compliance reviews, and regulatory assessments.
- Keep business users informed about security enhancements, policy updates, and organizational security standards.

Required Skills &

- Competencies

Technical Expertise

- Strong hands-on experience with SIEM platforms and security monitoring tools.
- Expertise in vulnerability assessment, risk analysis, and remediation planning.
- Experience with Identity &
- Access Management (IAM) frameworks and access control systems.
- Proven capability in incident detection, investigation, response, and recovery.
- Strong understanding of web application security testing methodologies and mitigation strategies.
- Knowledge of network security, firewalls, encryption technologies, endpoint security, and security architecture.
- Experience working within Security Operations Center (SOC) environments.
- Familiarity with Red Team and Blue Team operations and cybersecurity best practices.

Risk Management &

- Problem Solving

- Strong analytical and critical-thinking skills with the ability to identify and mitigate complex security risks.




- Ability to evaluate security threats and implement practical corrective measures.
- Proven experience in managing and resolving security incidents efficiently and effectively.

Leadership &

- Communication

- Ability to lead enterprise-wide security initiatives and influence cybersecurity strategy.
- Strong stakeholder management and cross-functional collaboration capabilities.
- Excellent verbal, written, and presentation skills.
- Ability to communicate technical concepts effectively to both technical and non-technical audiences.
- Experience working with senior leadership and executive stakeholders.

Educational Qualifications

Mandatory

- Bachelor s degree in information technology, Computer Science, Cybersecurity, Information Systems, or a related discipline.

Preferred

- Master s degree in information technology, Cybersecurity, Information Systems, or a related field.

Preferred Certifications One or more of the following certifications will be highly advantageous:

- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- Certified Ethical Hacker (CEH)
- ISO 27001 Lead Implementer
- ISO 27001 Lead Auditor
- GIAC Security Essentials (GSEC)
- GIAC Certified Incident Handler (GCIH)
- Other relevant GIAC certifications

Experience Requirements

- 8 10 years of progressive experience in Information Security, Cybersecurity, Risk Management, Security Operations, or related domains.
- Minimum 5 years of experience in a managerial or leadership capacity.
- Hands-on experience in Security Operations Center (SOC) environments.
- Strong background in incident response, threat monitoring, vulnerability management, and security governance.
- Experience working within multinational organizations and managing diverse regulatory requirements.
- Familiarity with international compliance frameworks such as GDPR, PCI-DSS, ISO 27001, and related standards.

Preferred Candidate Profile

- Demonstrated experience in vulnerability assessment and mitigation planning.
- Strong understanding of industry-specific security requirements across multiple sectors.
- Ability to work independently while driving strategic security initiatives.
- Experience managing security programs across geographically distributed organizations.
- Self-motivated, detail-oriented, and committed to continuous improvement in cyber security practices.

Why Join Us? Join our company to be part of an inspiring and dynamic team that values collaboration, personal growth making a meaningful impact. Enjoy exciting opportunities for professional development, a supportive work environment, and the chance to contribute to cutting-edge projects that shape the future. Embrace a culture that recognizes and rewards talent, fosters creativity, and promotes work-life balance. Join us to embark on a fulfilling and rewarding career journey. At Stemz, we are a thriving and innovative company, fueled by our unwavering pursuit of excellence and our dedication to creating a meaningful difference in people's lives. As we continue to grow, we are on the constant lookout for talented individuals to join our dynamic team of professionals.

Experience a cooperative, creative, and growth-oriented environment. Discover exciting opportunities to create an impact and shape the future. Explore our current openings and start a rewarding career journey with us.

📌 Information Security Manager (Chennai)
🏢 Stemz Healthcare
📍 Chennai