13 Nov
|
Revantage
|
Bengaluru
13 Nov
Revantage
Bengaluru
ABOUT REVANTAGE
Revantage a Blackstone Real Estate portfolio company is a global provider of corporate services.
With a corporate purpose of In Pursuit of Better Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies spanning diverse asset classes including residential logistics office hospitality and retail sectors. The companys footprint extends across North America Europe and Asia Pacific.
Creating a culture that inspires impact and momentum requires the right team. We know what it takes to lead an industry and are looking for leaders who seek constant growth want to excel and continuously improve upon themselves and the industry.
In addition to supporting Revantage we also recruit for Blackstone Real Estate portfolio companies giving you the unique prospect to work within a network of best-in-classprofessionals across a broad real estate platform.
India
With offices in Bengaluru and Gurugram our teams in India deliver expertise innovation and operational excellence that support thousands of assets across logistics data centers residential commercial and hospitality.
Whether youre building new capabilities driving critical initiatives or strengthening partnerships youll have the opportunity to trulyBuild What Matters.
ROLE SUMMARY
We are seeking an Information Security Manager for a Blackstone Real Estate portfolio company and the largest owner manager and developer of high-quality student housing communities in the United States. This role is based in Bengaluru India hired through Revantage India and reports to Chief Information Security Officer (CISO). The manager leads the India-based Application Development Security Engineer Information Security Engineer Information Security Analyst and Identity and Access Management Analyst converting security priorities into disciplined execution measurable service performance and timely risk reduction.
This is a hands-on leadership role requiring technical credibility sound judgment strong business communication and the ability to lead effectively across cultures and time zones. Working hours will provide meaningful overlap with US Central Time with rotating on-call coverage for US nights and weekends and coverage on US and India holidays to support uninterrupted operations.
PRIMARY ROLE
Lead coach and develop the four-person India information-security team; establish clear objectives priorities accountability and performance expectations.
Plan and balance work across application security security engineering security monitoring and response vulnerability management and identity and access management.
Serve as the primary India-based escalation point for security incidents operational issues access risks critical vulnerabilities and production-impacting events.
Translate direction from the CISO into operating plans procedures service levels work assignments metrics and evidence of control performance.
Coordinate closely with US-based Information Security IT Operations Infrastructure Cloud Networking Application Development Legal Risk Internal Audit and business teams.
Maintain effective daily operations including queue management alert and incident triage vulnerability remediation access requests control monitoring and stakeholder communication.
Ensure security is integrated throughout the Software Development Lifecycle through threat modeling secure design reviews automated testing CI/CD controls and practical developer guidance.
Oversee the design administration and continuous improvement of endpoint identity email network cloud application vulnerability-management and security-monitoring controls.
Ensure joiner mover and leaver activities RBAC privileged access access reviews service-account governance and Microsoft 365 shared-resource access are timely accurate and policy compliant.
Drive the investigation containment remediation documentation and lessons learned for security events with timely escalation of material risk and business impact.
Establish quality controls for team output including peer review evidence retention ticket hygiene runbooks and repeatable operating procedures.
Develop dashboards and concise executive-ready reporting on incidents vulnerabilities access application risk control health team capacity service levels and remediation progress.
Support audits regulatory obligations third-party incidents and control frameworks including NIST CSF CIS Controls PCI DSS HIPAA GLBA and applicable privacy requirements.
Identify automation and process-improvement opportunities that reduce repetitive work improve response speed and strengthen control consistency.
Manage vendor and technology-partner relationships within the assigned scope including support escalations service performance upgrades and security-tool optimization.
Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends US and India holidays incidents critical production events and business-continuity needs.
Perform other projects and responsibilities as assigned.
QUALIFICATIONS & SKILLS
Demonstrated ability to lead technical security professionals while remaining sufficiently hands-on to review work guide troubleshooting and manage escalations.
Broad knowledge of enterprise cybersecurity including security operations incident response vulnerability management IAM application security cloud security data protection and Zero Trust.
Working knowledge of secure software development CI/CD security SAST DAST SCA API security container security and Infrastructure as Code controls.
Strong understanding of identity lifecycles Active Directory Entra ID SSO MFA PAM RBAC OAuth OpenID Connect access certification and segregation of duties.
Experience operating security controls across Microsoft Azure AWS Windows Linux SaaS and enterprise-network environments.
Strong incident-management judgment including risk-based prioritization business-impact assessment escalation and clear written communication under pressure.
Ability to define meaningful operational metrics analyze trends identify control gaps and present recommended action to technical and non-technical leaders.
Excellent written and verbal business-English communication skills with the ability to collaborate across cultures functions and time zones.
Proficiency in the secure and responsible use of generative AI tools such as ChatGPT Claude Microsoft Copilot and Google Gemini.
Working knowledge of AI and generative-AI security risks and controls including identity data exposure prompt injection insecure model or API interactions monitoring governance and third-party AI services.
Practical customer-oriented leadership style with high integrity sound judgment adaptability resilience and a commitment to continuous improvement.
EDUCATION & EXPERIENCE
Bachelors degree in information technology computer science cybersecurity or a related field or equivalent professional experience.
Seven or more years of progressive cybersecurity experience spanning multiple security disciplines.
At least three years of experience leading security professionals technical operations or complex cross-functional security initiatives.
Experience supporting a US-based or global enterprise and managing services across geographically distributed teams and time zones.
Experience with audits security frameworks operational metrics third-party risk and the development of standards procedures and executive reporting.
SECURITY TOOLS
Hands-on familiarity with Microsoft Defender and Entra ID; CrowdStrike Falcon Complete/MDR Identity Threat Protection Shield Recon Cloud Security and Next-Gen SIEM; Wiz; Zscaler ZIA ZPA ZDX and ZTA; Proofpoint TAP and DLP; Rapid7 InsightVM; Black Kite; and NINJIO.
Ability to oversee and validate administration reporting alert handling integrations and escalation practices for application-security and DevSecOps platforms such as Burp Suite SonarQube GitHub CodeQL Snyk and Veracode plus IT service-management and IAM workflow platforms.
CERTIFICATIONS
CISSP or CISM required ; other certifications such as CCSP CSSLP Microsoft security CrowdStrike AIDR Zscaler identity DevSecOps attainable within twelve months of hire
Job Applicant Privacy Notice
EEO Statement
The Company is an equal opportunity accordance with applicable law we prohibit discrimination against any applicant employee or other covered person based on any legally recognized basis including but not limited to: veteran status uniformed servicemember status race color caste immigration status religion religious creed (including religious dress and grooming practices) sex gender gender expression gender identity marital status sexual orientation pregnancy (including childbirth lactation or related medical conditions) age national origin or ancestry citizenship physical or mental disability genetic information (including testing and characteristics) protected leave status domestic violence victim status or any other consideration protected by federal state or local law. We are committed to providing reasonable accommodations if you need an accommodation to complete the application process please email
Required Experience:
Manager
📌 AVP, Information Security Manager (Bengaluru)
🏢 Revantage
📍 Bengaluru