Join our dynamic Cyber team as a Manager, focusing on Security Frameworks and Standards. You will play a pivotal role in enhancing organizations' cyber resilience by developing and implementing robust risk and governance frameworks.

This position offers an exciting opportunity to guide clients in bolstering their information security posture. You'll identify critical gaps and risks within their existing environments, crafting effective solutions to mitigate them and foster a secure operational landscape.

Develop, implement, and maintain comprehensive risk and governance frameworks for clients. Guide teams in assessing client information security, identifying gaps, and mitigating risks. Conduct security risk assessments for third-party vendors and define TPRM frameworks. Perform cybersecurity maturity assessments using established frameworks like NIST CSF and ISO 27001. Lead projects for ISO 27001-based Information Security Management System implementation. Manage risk identification, evaluation, mitigation, and monitoring activities to deliver actionable insights and improvement roadmaps. Evaluate application security architectures, including threat modeling and secure coding standards. Plan and execute IT and cyber security audits, managing teams for Information Systems audits. Oversee security and cyber strategy projects, guiding teams to ensure timely fulfillment of responsibilities. Assist clients in reviewing and implementing security controls across various processes, including incident management, access management, and physical security. Support PCI DSS assessments, gap analysis, and provide guidance for remediation efforts. Track evolving regulatory requirements and integrate changes into cybersecurity programs. Plan and execute ITGC control testing, identifying gaps and supporting remediation.

Bachelor's degree in Engineering, B.Tech (Tier 1/2), or a Master's degree in Information Security, Computer Science, or a related field is required.

Possess 8-10 years of relevant experience in cybersecurity consulting, risk management, and compliance.

Demonstrate in-depth knowledge of security frameworks and standards such as NIST, ISO 27001, and COBIT.

Showcase understanding of cloud service models and security controls across major platforms (AWS, Google Cloud, Azure).

Exhibit strong analytical, communication, and stakeholder management skills.

Experience with ServiceNow IRM or equivalent GRC tooling is essential, including control frameworks, data management, and reporting.

Familiarity with control testing methodologies, assurance practices, evidence evaluation, and issue management is crucial.

Understanding of regulatory frameworks and resilience concepts, such as operational resilience and DORA, is beneficial.

Professional certifications like CISSP, CISA, CISM, CRISC, ISO 27001 LA/LI, ISO 31000 LA/LI, ISO 22301 LA/LI, ITIL, or PCI QSA are preferred.