Lead - Information Security and Data Privacy (India/US hours)

As a Lead – Information Security & Privacy, you will function as an individual contributor responsible for driving the organization’s Governance, Risk, and Compliance (GRC) objectives. The role involves providing technical oversight, security and privacy risk management, and regulatory alignment across complex technology environments, including cloud platforms and AI initiatives. You will work closely with internal stakeholders, clients, suppliers, and auditors to strengthen information security and privacy controls and safeguard the Confidentiality, Integrity, and Availability (CIA) of organizational and client data.

The ideal candidate should have 7+ years of experience in Information Security and Privacy, with strong expertise in GRC, risk assessments, compliance, audits, contractual security/privacy reviews, and regulatory requirements. Professional certification or proficiency in frameworks such as ISO 27001, ISO 27701, or equivalent standards is expected. Familiarity with AI/LLM security and privacy risk concepts will be an advantage. A Bachelor’s degree in Computer Science, Information Systems, or a related discipline is required, while a Law degree or relevant legal qualification is preferred.

Mandatory Skills

Information Security,ISO 27001,ISO 27701,Data Privacy

Role

Roles & Responsibilities

• Perform comprehensive information security and privacy risk assessments for critical data assets, digital environments, cloud platforms, and AI initiatives.
• Identify security and privacy risks and recommend appropriate technical and organizational controls for risk mitigation.
• Review information security and data privacy clauses in client and supplier contracts, including Data Processing Agreements (DPAs).
• Ensure contractual requirements are aligned with organizational policies, regulatory obligations, and applicable security and privacy standards.
• Drive compliance activities, including assessments, audits, control testing, remediation, and continuous compliance monitoring.
• Manage compliance against frameworks and standards such as ISO 27001, ISO 27701, SOC 2 Type 2, GDPR, and HIPAA.
• Lead the end-to-end lifecycle of internal and external security audits, including audit readiness, evidence coordination, stakeholder management, and remediation.
• Communicate information security objectives, compliance requirements, strategic initiatives, and organizational programs to leadership and employees.
• Act as the primary Information Security and Privacy point of contact during the sales cycle.
• Support RFPs, client security questionnaires, due diligence assessments, and detailed security assessments.
• Lead investigations into information security incidents and ensure proper documentation, stakeholder coordination, resolution, and remediation.
• Collaborate with business, technology, legal, compliance, and other stakeholders to strengthen the organization's overall security and privacy posture.

Experience

7 to 12 years