Manager - Information Security and Data Privacy

We are seeking an experienced Manager – Information Security & Data Privacy professional to lead Governance, Risk, and Compliance (GRC) initiatives and strengthen the organization’s information security and privacy posture.

The role will be responsible for managing security governance programs, compliance activities, privacy controls, risk assessments, and audit engagements while ensuring adherence to global regulatory and industry requirements. The ideal candidate should have strong expertise across ISO 27001, ISO 27701, SOC 2 Type II, GDPR, HIPAA, risk management, security audits, privacy compliance, and policy governance.

The candidate will also be expected to assess security and privacy risks associated with emerging technologies, including AI and Large Language Models (LLMs), and work closely with internal stakeholders, customers, auditors, regulators, and external partners.

Required Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or a related discipline.
• 13+ years of experience in Information Security, Cybersecurity, Privacy, or GRC functions.
• Strong experience in ISO 27001, ISO 27701, SOC 2, GDPR, HIPAA, and audit management.
• Proven expertise in policy development, compliance management, and risk assessments.
• Experience evaluating security and privacy risks related to AI/LLM technologies.
• Professional certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISSP, CISM, CIPM, CIPT, or equivalent are preferred.
• ISO 42001 experience is preferred.

Mandatory Skills

Infosec,Information Security,Data Privacy,ISO 27001

Role

• Develop, implement, and maintain information security and data privacy policies, standards, procedures, and governance frameworks.
• Drive compliance initiatives across ISO 27001, ISO 27701, SOC 2 Type II, GDPR, and HIPAA requirements.
• Conduct enterprise-wide security and privacy risk assessments, compliance reviews, and remediation activities.
• Review security and privacy requirements in customer contracts, vendor agreements, and Data Processing Agreements (DPAs).
• Lead and coordinate internal and external security, privacy, and compliance audits through successful completion.
• Manage security incidents, investigations, corrective actions, and remediation activities.
• Partner with business and technology stakeholders to identify, evaluate, and mitigate information security and privacy risks.
• Conduct governance and risk assessments for emerging technologies, including AI and LLM initiatives.
• Drive third-party risk management, vendor security reviews, and privacy compliance assessments.
• Strengthen enterprise security controls and privacy compliance programs.
• Act as a key liaison with customers, auditors, regulators, and external stakeholders on security, privacy, and compliance matters.
• Lead and mentor teams responsible for information security, privacy, risk, and compliance programs.
• Drive security awareness and compliance communication across the organization.
• Monitor regulatory and industry developments and ensure appropriate updates to security and privacy governance practices.
• Support continuous improvement of the organization's GRC, information security, and data privacy posture.

Experience

12 to 20 years