IT Compliance & Information Security Manager

Location: Mumbai / Noida
Experience: 5-8 Years
Employment Type: Full Time

About the Role

Are you passionate about cybersecurity, compliance, and information security governance? Join our team and play a key role in strengthening our organization's security and compliance framework.

Key Responsibilities

• Manage compliance programs for ISO 27001, HIPAA, HITRUST, SOC 2, and PCI DSS.
• Lead certification and surveillance audits.
• Manage Vulnerability Assessments & Penetration Testing (VAPT) and remediation tracking.
• Conduct IT Risk Assessments and IT General Controls (ITGC) reviews.
• Support incident management, security governance, and cybersecurity control monitoring.
• Drive disaster recovery planning and testing.
• Coordinate client security assessments and due diligence reviews.
• Partner with technology teams to enhance the organization's security posture.

Required Skills

• 5-8 years of experience in IT Compliance, Information Security, Cybersecurity Governance, or IT Risk.
• Hands-on expertise in ISO 27001, HIPAA, HITRUST, SOC 2, PCI DSS, and VAPT.
• ISO 27001 Lead Auditor Certification (Mandatory).
• Certifications such as PCI DSS Implementor, CISA, CEH, CISSP, or CISM will be an added advantage.
• Strong understanding of ITGC controls, security audits, and compliance frameworks.