Information Security Risk Manager

We are looking for an experienced Information Security (IS) Risk Manager to lead enterprise-wide security assurance, governance, risk, compliance, and business continuity initiatives.

Key Responsibilities

• Lead enterprise-wide information security assurance, governance, risk, compliance, and business continuity programs, ensuring alignment with internal policies and regulatory requirements.
• Perform and manage information security and cloud risk assessments across AWS and Azure, identify business impact, define mitigation strategies, and communicate risks in clear business terms.
• Establish, implement, and maintain security governance frameworks, controls, and metrics, ensuring cyber risks and vulnerabilities are prioritized and remediated within agreed SLAs.
• Own ISMS governance and audits, including internal and external audits, gap analysis, compliance readiness, and corrective actions for ISO/IEC 27001, PCI DSS, NIS 2, and other regulatory standards.
• Develop, manage, and maintain Business Continuity Planning (BCP) and Disaster Recovery programs to ensure organizational resilience.
• Manage third-party security risk, including vendor due diligence, security requirements in contracts, cloud and security tooling assessments (GRC tools, CASB), and coordination of external audits and remediation plans.
• Develop, update, and govern information security policies, procedures, standards, and security awareness programs, ensuring continuous improvement and regulatory alignment.

Skills & Expertise

• Information Security Risk Management & Security Assurance
• Governance, Risk & Compliance (GRC)
• ISMS, ISO/IEC 27001
• PCI DSS, NIS 2, Regulatory Compliance
• Cloud Security – AWS & Azure
• Security Audits & IT Auditing
• Business Continuity Planning (BCP) & Disaster Recovery
• Cyber Risk Assessment & Compliance Monitoring

Experience & Certifications (Preferred)

• 10+ years of experience in Information Security / GRC / Risk Management
• Exposure to Telecom, BFSI, or large enterprise environments
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor / Implementer preferred