Information Technology Security Manager

Role Overview :

We are looking for a highly experienced Manager IT & Security to lead and scale our enterprise IT and information security function.

This is a strategic as well as hands-on leadership role responsible for building a secure, resilient, and audit-ready technology environment across the organization.

The selected candidate will drive IT operations, cybersecurity, compliance, data protection, AI security governance, and customer trust initiatives while leading a growing team.

The role is ideal for a builder-operator who can design systems and processes, strengthen security architecture, manage compliance programs, and support business growth through a strong security posture.

Key Responsibilities :1. Enterprise IT & Infrastructure :

• Own and manage enterprise IT operations including end-user computing, cloud infrastructure, networks, endpoint management, and office IT.

• Design and implement secure, identity-driven architecture using zero-trust principles, conditional access, and device posture enforcement.

• Ensure high availability, performance, resilience, and operational efficiency of internal systems.

• Drive adoption of least-privilege access and cloud security best practices across AWS, Azure, or GCP environments.

2. Security Strategy & Operations :

• Define and execute the organizations information security strategy aligned with business goals.

• Lead security operations, vulnerability management, patch management, identity governance, monitoring, and incident response.

• Establish threat-informed defense practices and improve detection and response capabilities through automation and AI-driven security operations.

• Manage security incidents, investigations, containment, recovery, and post-incident improvements.

3. Product & Platform Security :

• Partner with engineering teams to embed secure SDLC and DevSecOps practices across the product lifecycle.

• Drive security architecture reviews for authentication, authorization, APIs, cloud-native services, endpoint platforms, and virtualization technologies.

• Implement SAST, DAST, SCA, SBOM, threat modeling, and software supply chain security controls.

4. Data Protection & Compliance :

• Serve as the Data Protection Officer (DPO) and ensure compliance with GDPR, India DPDP Act, and other applicable privacy regulations.

• Define data classification, encryption, DLP, retention, anonymization, and cross-border data transfer policies.

• Lead ISO/IEC 27001, SOC 2 Type II, and other compliance and audit programs, ensuring audit readiness and evidence management.