Davies
Lead Information Security Officer
Senior InfoSec people leader based at Davies' Pune GCC centre, directing the global Information Security team day to day. Core work spans governance, risk and compliance (ISO 27001, NIST CSF, CIS Controls), risk assessments, policy, awareness training, Board-level reporting, audits and incident response.
- Compensation
- Not disclosed
- Location
- Viman Nagar – Pune, Maharashtra
- Work setup
- Hybrid
- Seniority
- Lead
- Employment
- Not specified
- Experience
- 10+ years
- Category
- Security
- Posted
Skills
Must have
- Minimum 10 years' experience in Information Security, cyber security, governance, risk or compliance roles within large or complex organisations
- Experience leading and developing geographically distributed teams, including remote line management
- Experience implementing global Information Security and cyber risk frameworks, including ISO/IEC 27001, NIST Cybersecurity Framework and CIS Controls
- Bachelor's degree in Information Security, Cyber Security, IT, Risk Management or related discipline, or equivalent professional experience
- Experience working in regulated sectors and engaging with senior management, auditors, regulators, customers and third parties
- Strong knowledge of InfoSec governance, risk management, control design, policy management, security awareness and third-party assurance
- Ability to translate complex security, regulatory and risk matters into clear, actionable business advice
- Excellent leadership, coaching, delegation, workload planning and team development capability
- Ability to lead complex risk assessments and credibly challenge senior stakeholders
- Strong knowledge of global security regulations, recognised frameworks and industry good practice
- Experience producing executive and Board-level dashboards, metrics and risk reporting
- Security incident response experience
- Strong stakeholder and supplier relationship management across global and multicultural environments
- Commercial awareness balancing business enablement with information protection
- Excellent written and verbal communication for technical, non-technical and executive audiences
- Proven people leader with a collaborative, service-led and accountable approach
- Confident decision-maker able to prioritise competing demands under pressure
- Strong documentation, analytical and problem-solving skills
- Pragmatic and proportionate risk mindset with constructive challenge
- Experience working within highly regulated businesses
- Flexible working hours to support a global team and material security incidents
- Commitment to continuous professional development and sharing good practice
Nice to have
- Professional certifications such as CISM, CISSP, CRISC, or ISO/IEC 27001 Lead Implementer/Lead Auditor
- Active membership of a recognised professional body or equivalent CPD evidence
Full description
The Lead Information Security Officer is a senior Information Security practitioner and people leader responsible for directing the day-to-day work and development of the global Information Security team.
Based in the Pune GCC centre and reporting to the Group Head of Cyber, the role will retain the core governance, risk, compliance, awareness and advisory responsibilities of the Group Information Security Officer while providing clear leadership, prioritisation, quality oversight and escalation support for the wider team. The role will help the business achieve its objectives safely through appropriate and proportionate controls, policies, standards and risk management practices, supported by clear executive and Board-level reporting.
- Provide line management, coaching, objective setting, performance support and professional development for the whole Information Security team, including colleagues working across locations and time zones.
- Plan, prioritise and allocate team activity, monitor delivery against agreed objectives and ensure consistent quality, service and governance standards.
- Act as the primary escalation point for Information Security risks, issues and incidents, escalating material matters to the Group Head of Cyber and supporting out-of-hours response where required.
- Lead the development, review and implementation of Information Security governance processes, policies, standards and control requirements in response to business change, emerging threats, legislation and regulation.
- Lead the Information Security risk management approach, ensuring risks are identified, assessed, recorded, treated, monitored and reported across the Group.
- Lead complex information security and third-party risk assessments, balancing technical, physical, procedural and people controls with business needs and risk appetite
- Lead the production of Information Security requirements for suppliers, business initiatives and compliance activities, working with the wider Governance, Risk and Compliance function to ensure risks are appropriately managed.
- Lead the Information Security training and awareness programme, ensuring colleagues understand their security responsibilities and how their work supports organisational objectives.
- Provide pragmatic Information Security advice and challenge to senior stakeholders, programmes, projects and operational teams, enabling secure business decisions.
- Own the production and quality assurance of monthly Information Security risk dashboards, KPI and KRI reporting, and executive and Board-level updates.
- Support internal and external audits, regulatory reviews and customer assurance activities, ensuring evidence, remediation actions and responses are complete, accurate and timely.
- Support security incident response, lessons learned and control improvement activities, coordinating Information Security input with Cyber Security, Privacy, Data Governance, Technology and business teams.