information security manager

Careers at Tide

<div><div><h3 class="jobSectionHeader"><b>ABOUT TIDE</b></h3>
<p>
At Tide we help SMEs save time (and money) in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions from invoicing to accounting.</p><p><br>
Tide is transforming the small business banking market with over 1.6 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data-driven decisions to help SMEs save both time and money.</p>
<p><b>
Tide facts:</b></p>
<ul>
<li>Tide is available for UK, Indian, German and French SMEs</li>
<li>Over 1.6 million members: 800,000 UK and 800,000 in India and growing rapidly</li>
<li>Over $200 million raised in funding</li>
<li>Over 2500 Tideans globally - we're diversity champions!</li>
<li>We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram and New Delhi, India</li>
</ul></div><p><b>
ABOUT THE ROLE:</b></p>
<p>
As an Information Security Compliance Manager, you will be a seasoned information security and risk professional with unrivalled expertise in the Indian regulatory landscape for financial institutions. You excel at managing regulatory requirements, confidently representing Tide to local regulators, and ensuring compliance with mandatory security and data standards for Tide's India operations.</p>
<p>
Core responsibilities will include:</p>
<ul>
<li>Primary Regulatory Liaison: Acting as the primary point of contact and representative for Tide Risk and Compliance when interacting with Indian financial regulators (e.g., RBI, CERT-IN) and key local partners on information security topics.</li>
<li>Regulatory Compliance Ownership: Owning and ensuring Tide's compliance with all applicable Indian regulatory requirements and guidelines related to information security (e.g., RBI Master Directions, Data Localisation requirements, Payment Security Standards).</li>
<li>Local Standards Definition: Acting as a subject matter expert to define and enforce local information security standards specific to the Indian regulatory and operational environment.</li>
<li>Audit Management (Regulatory): Leading and facilitating all regulatory-specific audits in India, including the RBI Systems Audit Report (SAR), Data Localisation audits, and any other mandated external assessments.</li>
<li>Regulatory Risk Management: Managing information security risk within the India context, specifically interpreting and applying Indian regulatory risk management requirements to Tide's operations.</li>
<li>Reporting to Regulators &amp; Leadership: Preparing and presenting regular, comprehensive reports on security posture, risk status, and compliance efforts to Tide India Senior Leadership, key partners, and regulatory bodies as required.</li>
<li>Regulatory Intelligence: Proactively monitoring the Indian financial sector for new or changing regulatory and compliance developments pertaining to information security and advising leadership on necessary preparations or changes.</li>
<li>Second Line of Defence: Operating as part of the Second Line of Defence (2LOD), providing independent oversight and challenge on the effectiveness of information security controls against Indian regulatory mandates.</li></ul><br>
<p></p>
<h2 class="jobSectionHeader"><b>
WHAT WE ARE LOOKING FOR:</b></h2>
<ul><li>7+ years experience in information security risk and compliance, with a heavy focus on the Indian financial sector.</li>
<li>Mandatory, demonstrable experience interacting with financial regulators and government agencies in India (RBI, CERT-IN).</li>
<li>In-depth, current knowledge of RBI Master Directions, data protection regulations (including PII/sensitive data handling), and payment security standards applicable to the Indian market.</li>
<li>Proven experience in successfully managing and responding to regulatory audits, particularly the RBI SAR.</li>
<li>Exceptional communication and presentation skills required for engaging with regulators and senior management.</li>
<li>Relevant certifications such as CISM, CISA, or CRISC are strongly preferred.</li></ul><br>
<p></p>
<h2 class="jobSectionHeader"><b>
WHAT YOU'LL GET IN RETURN:</b></h2>
<p>
Our location-specific employee benefits are designed to cater to the unique needs of Tideans:</p>
<ul>
<li>Competitive Compensation - competitive salary and share options</li>
<li>Time Off &ndash; Generous annual leave on top of bank holidays.</li>
<li>Parental Leave &ndash; Paid maternity, paternity, and adoption leave to support your family journey.</li>
<li>Sabbatical &ndash; Extended unpaid and paid leave options after completing milestone years with Tide.</li>
<li>Health Insurance &ndash; Private family insurance with additional OPD coverage and top-up options.</li>
<li>Life &amp; Accident Cover &ndash; Comprehensive accidental and life insurance protection.</li>
<li>Mental Wellbeing &ndash; Access to therapy sessions, courses, meditations, and workshops.</li>
<li>Volunteering &amp; Development Days &ndash; Paid days annually for volunteering or personal growth.</li>
<li>Learning &amp; Development &ndash; Annual budget for books, courses, coaching, and more.</li>
<li>WOO (Work Outside the Office) &ndash; Work from abroad for up to 90 days annually.</li>
<li>Home Office Setup &ndash; Contribution towards setting up your home office</li>
<li>Laptop Ownership &ndash; Keep your old laptop and get a new one when it's time for a replacement.</li>
<li>Snacks &amp; Meals &ndash; Office perks with snacks, coffee, tea, and lunch (location dependent).</li>
</ul><div><h3 class="jobSectionHeader"><b>TIDE IS A PLACE FOR EVERYONE</b></h3>
<p>
At Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently-abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members' diverse needs and lives.</p>
<p>
We are One Team and foster a transparent and inclusive environment, where everyone's voice is heard.</p><br>
<p></p>
<p><i>
At Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone's voice is heard.</i></p><div><br>
</div>
<div><b>Disclaimer</b></div>
<div></div>
<div><i>It has come to our attention that individuals or agencies are falsely claiming to represent Tide and are reaching out to candidates regarding job opportunities. Please be aware that:</i></div>
<ul><li><i>Tide does </i><b><i>not</i></b><i> charge any fees at any stage of the recruitment process.</i></li>
<li><i>All official Tide job opportunities are listed exclusively on our </i><b><i>Careers Page</i></b><i> and applications should be submitted through this channel.</i></li>
<li><i>Communication from Tide will only come from an official </i><b><i>@tide</i></b><b><i>.co</i></b><i> email address.</i></li>
<li><i>Tide does not work with agencies or recruiters without prior formal engagement, and we do not authorize third parties to make job offers on our behalf.</i></li>
</ul>
<p><i>If you are contacted by anyone misrepresenting Tide or requesting payment, please treat it as fraudulent and report it to us immediately at </i><i>talent@tide.co</i><br>
<i>Your safety and trust are important to us, and we are committed to ensuring a fair and transparent recruitment process.</i></p><br>
<p></p>
<p><i>
Tide leverages AI to enhance our hiring experience. You can read more about how we use AI in our recruitment process in our </i><i>AI Policy</i><i>.</i></p>
<p><i>
Your personal data will be processed by Tide for recruitment purposes and in accordance with </i><i>Tide's Recruitment Privacy Notice</i><i>.</i></p></div></div>

Information Security Compliance Manager

Achieve Debt Relief

<div><p>Company Description</p><p>
Achieve is a leading digital personal finance company. We help everyday people move from struggling to thriving by providing innovative, personalized financial solutions. By leveraging proprietary data and analytics, our solutions are tailored for each step of our member's financial journey to include personal loans, home equity loans, debt consolidation, financial tools and education. Every day, we get to help our members move their finances forward with care, compassion, and empathetic touch. We put people first and treat them like humans, not account numbers.</p><p>
Since 2002, Achieve has grown into one of the largest private consumer fintech unicorns in the U.S., with over $40B in enrollments for our industry-leading, tech-enabled debt resolution services business, and over $11Bn in personal and home loans originations via our banking-as-a-service partner.</p><p></p><p><br>
Job Description</p><p>
We are seeking a highly experienced and motivated <b>Information Security Project Manager - Temporary</b> to lead and manage complex security projects. The ideal candidate will have a proven track record of successfully delivering security projects on time and within budget, ensuring alignment with business objectives and regulatory requirements. This role requires a deep understanding of information security principles and project management methodologies.</p><p>
This is a temporary role that we expect will last approximately 12 months.
</p><p>Key Responsibilities:</p><ul><li><p>
Project Leadership &amp; Management:</p><ul><li><p>
Lead, plan, execute, monitor, control, and close information security projects, ensuring adherence to scope, schedule, and budget.</p></li><li><p>
Develop comprehensive project plans, including WBS, timelines, resource allocation, risk assessment, and communication plans.</p></li><li><p>
Manage project resources, including internal teams and third-party vendors, to ensure effective collaboration and delivery.</p></li><li><p>
Proactively identify, assess, and mitigate project risks and issues, developing contingency plans as needed.</p></li><li><p>
Track project performance using appropriate tools and techniques, and report progress to stakeholders regularly.</p></li></ul></li><li><p>
Compliance Related Projects &amp; Best Practices:</p><ul><li><p>
Manage and coordinate all aspects of security compliance (PCI, SOC1, SOC2, NIST) projects, including gap assessments, remediation planning and execution, and audit support.</p></li><li><p>
Collaborate with internal teams (IT, Security, Legal, Finance, etc.) and external assessors to ensure successful assessments and attestations.</p></li><li><p>
Develop and maintain documentation related to security controls, policies, and procedures.</p></li><li><p>
Stay current with changes in security requirements and advise the organization on necessary adjustments.</p></li></ul></li><li><p>
Experience leading and managing projects related to Identity and Access Management (IAM):</p><ul><li><p>
Implementation or upgrade of IAM solutions (e.g., identity governance, access management, privileged access management).</p></li><li><p>
Integration of IAM systems with enterprise applications and infrastructure.</p></li><li><p>
Development and implementation of identity lifecycle management processes (provisioning, deprovisioning, access reviews).</p></li><li><p>
Understanding of IAM best practices, standards, and regulatory compliance requirements.</p></li></ul></li><li><p>
Stakeholder Management &amp; Communication:</p><ul><li><p>
Effectively communicate project expectations, progress, risks, and issues to team members and stakeholders at all levels, including executive leadership.</p></li><li><p>
Build and maintain strong relationships with internal and external stakeholders.</p></li><li><p>
Facilitate project meetings, including steering committee meetings, project team meetings, and stakeholder updates.</p></li></ul></li><li><p>
Security Best Practices:</p><ul><li><p>
Ensure projects align with overall information security strategy, policies, and standards.</p></li><li><p>
Contribute to the continuous improvement of information security processes and project management methodologies.</p></li><li><p>
Promote security awareness and best practices throughout the organization.</p></li></ul></li></ul><p>
Qualifications</p><ul><li><p>
Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Administration, or a related field.</p></li><li><p>
Minimum of 7+ years of experience in IT project management, with at least 5 years specifically focused on information security projects.</p></li></ul><p>
Additional Information</p><p>
All your information will be kept confidential according to EEO guidelines.</p><p><b>
Achieve well-being with:</b></p><ul><li>
401 (k) with employer match</li><li>
Medical, dental, and vision with HSA and FSA options
</li><li>Competitive vacation and sick time off, as well as dedicated volunteer days</li><li>
Access to wellness support through Employee Assistance Program, physical and mental health wellness programs</li><li>
Pet care discounts for your furry family members</li><li>
Financial support in times of hardship with our Achieve Care Fund</li><li>
A safe place to connect and a commitment to diversity and inclusion through our six employee resource groups</li></ul><p><b>
Join Achieve, change the future.</b></p><p></p><p><b><br>
Attention Agencies &amp; Search Firms: </b>We do not accept unsolicited candidate resumes or profiles. Please do not reach out to anyone within Achieve to market your services or candidates. All inquiries should be directed to Talent Acquisition only. We reserve the right to hire any candidates sent unsolicited and will not pay any fees without a contract signed by Achieve&rsquo;s Talent Acquisition leader.</p><p></p><p><br>
#LI-KM1</p></div>

Information Security Project Manager - Temporary

Sapiens

<div><div><div><div><div><div><div><h1 class="jobSectionHeader"><b>Your Journey Starts Here</b></h1>
<p>Explore Your Next Role at Sapiens</p>
</div></div></div></div></div></div><div><div><div><div><ul><li>Jobs
</li><li>Senior
</li></ul></div></div></div></div><div><div><div><div><div><div>Location Bangladore, India
</div><div>Working Model Fulltime, Hybrid
</div><div>Req ID 12345
</div></div><p></p><div><div>Add to my Favorites
</div><div></div><div>Copy Link
</div></div></div></div></div></div><div></div><div><div><div><div><h1 class="jobSectionHeader"><b>Compliance Manager
</b></h1></div></div></div></div><div><div><div><div>Req ID: 56089
</div></div></div></div><div><div><div><div>Location:
Bangalore, IN
</div></div></div></div><div><div><div><div><div><b>Sapiens</b> is looking for a Compliance Manager to join our Bangalore team. If you have expertise in quality management systems for IT services and delivery and are eager to advance your career with a globally established company, this opportunity could be the ideal fit for you.</div><br>
<div></div>
<div><b>
Location: Bangalore</b></div>
<div>
Working Model: Our flexible work arrangement combines both remote and in-office work, optimizing flexibility and productivity.</div>
<div>
This position will be part of Sapiens CTIO division, for more information about it, click here: www.sapiens.com.</div><br>
<div></div>
<div><b>
What you&rsquo;ll do:</b></div><br>
<div></div>
<div>
We are seeking a highly skilled Security Compliance and Information Security Manager to ensure the organization&rsquo;s compliance with all relevant security regulations, frameworks, and standards. The role is responsible for safeguarding our information systems, managing risk, and leading compliance efforts. The ideal candidate will have deep expertise in both compliance and technical security measures, ensuring a proactive approach to security threats while maintaining compliance with regulatory requirements.</div><br>
<div></div>
<div><b>
Key Responsibilities:</b></div><br>
<div></div>
<div><b>
Security Compliance:</b></div><br>
<div></div>
<ul>
<li>Lead the development, implementation, and management of the company&rsquo;s security compliance programs (e.g., ISO 27001, SOC 2, NIST, GDPR, HIPAA).</li>
<li>Ensure compliance with applicable regulations and standards, including data protection laws, privacy regulations, and industry-specific guidelines.</li>
<li>Develop and maintain documentation related to compliance policies, standards, and processes.</li>
<li>Conduct regular security compliance audits, risk assessments, and gap analysis to identify vulnerabilities and areas for improvement.</li>
<li>Collaborate with legal, HR, and other departments to maintain a comprehensive compliance framework.</li>
<li>Interface with external auditors, regulators, and other third parties during compliance assessments and certifications.</li>
<li>Provide training and awareness programs for employees to foster a culture of security and compliance.</li>
<li>Prepare compliance reports and communicate with leadership on the status of security compliance initiatives.</li></ul><br>
<div></div>
<div><b>
Information Security:</b></div><br>
<div></div>
<ul>
<li>Develop and implement the organization&rsquo;s information security strategy, policies, and procedures to protect critical systems and data.</li>
<li>Monitor and assess security risks, threats, and vulnerabilities across all information systems, networks, and applications.</li>
<li>Lead incident response efforts, including forensic analysis, investigation, and reporting of security breaches or incidents.</li>
<li>Implement security technologies such as firewalls, intrusion detection systems (IDS), data loss prevention (DLP), and endpoint protection tools.</li>
<li>Manage identity and access management (IAM) systems, ensuring that access controls and user privileges are appropriately defined and enforced.</li>
<li>Oversee the security of cloud infrastructure (AWS, Azure, GCP), including configuration reviews, security assessments, and monitoring.</li>
<li>Conduct regular security testing, including vulnerability scans and penetration testing, to validate the security posture of systems.</li>
<li>Work closely with DevOps and engineering teams to integrate security practices into development and operational processes (DevSecOps).</li>
<li>Ensure the organization complies with secure coding standards and best practices in application development.</li>
<li>Stay current on the latest security trends, vulnerabilities, and technologies, and recommend upgrades to security infrastructure as necessary.</li></ul><br>
<div></div>
<div><b>
What to Have for this position.</b></div>
<div><b>
Must have Skills.</b></div><br>
<div></div>
<ul>
<li>Bachelor&rsquo;s degree in information security, Computer Science, or a related field.</li>
<li>12+ years of experience in information security, risk management, or security compliance.</li>
<li>Experience managing compliance programs (ISO 27001, SOC 2, NIST, GDPR, HIPAA, PCI DSS).</li>
<li>In-depth knowledge of information security principles, including network security, application security, encryption, identity management, and incident response.</li>
<li>Familiarity with security tools and technologies, including firewalls, IDS/IPS, DLP, SIEM, endpoint security, and vulnerability management.</li>
<li>Experience with cloud security in platforms like AWS, Azure, or GCP.</li>
<li>Strong understanding of data privacy regulations (GDPR, CCPA) and their impact on security compliance.</li>
<li>Strong leadership skills and experience managing cross-functional teams or security operations.</li>
<li>Excellent analytical and problem-solving skills, with a proactive approach to identifying and mitigating risks.</li>
<li>Certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.</li></ul><br>
<div></div>
<div><b>
Preferred Qualifications:</b></div><br>
<div></div>
<ul>
<li>Master&rsquo;s degree in information security, Cybersecurity, or related field.</li>
<li>Hands-on experience with security automation and orchestration in a DevSecOps environment.</li>
<li>Experience working with security frameworks for regulated industries (e.g., healthcare, finance).</li>
<li>Familiarity with advanced threat detection and mitigation strategies.</li>
<li>Certifications in cloud security (e.g., AWS Certified Security Specialty, Azure Security Engineer Associate).</li></ul><br>
<div></div>
<div><b>
About Sapiens</b></div>
<div>
Sapiens is a global leader in the insurance industry, delivering its award-winning, cloud-based SaaS insurance platform to over 600 customers in more than 30 countries. Sapiens&rsquo; platform offers pre-integrated, low-code capabilities to accelerate customers&rsquo; digital transformation. With more than 40 years of industry expertise, Sapiens has a highly professional team of over 5,000+ employees globally. For More information visit us on www.sapiens.com.</div><br>
<div></div>
<div><b>
Sapiens is an equal opportunity employer. We value diversity and strive to create an inclusive work environment that embraces individuals from diverse backgrounds.</b></div><br>
<div></div>
<div>
Disclaimer: Sapiens India does not authorise any third parties to release employment offers or conduct recruitment drives via a third party. Hence, beware of inauthentic and fraudulent job offers or recruitment drives from any individuals or websites purporting to represent Sapiens . Further, Sapiens does not charge any fee or other emoluments for any reason (including without limitation, visa fees) or seek compensation from educational institutions to participate in recruitment events. Accordingly, please check the authenticity of any such offers before acting on them and where acted upon, you do so at your own risk. Sapiens shall neither be responsible for honouring or making good the promises made by fraudulent third parties, nor for any monetary or any other loss incurred by the aggrieved individual or educational institution.In the event that you come across any fraudulent activities in the name of Sapiens , please feel free report the incident at sapiens to sharedservices@sapiens.com.</div>
</div></div></div></div><div><div><div><div><div><div><h2 class="jobSectionHeader"><b>About Sapiens</b></h2>
<p>Sapiens is a global leader in the insurance industry, delivering its award-winning, cloud-based SaaS insurance platform to over 600 customers in more than 30 countries. Sapiens&rsquo; platform offers pre-integrated, low-code capabilities to accelerate customers&rsquo; digital transformation. With more than 40 years of industry expertise, Sapiens has a highly professional team of over 5,000 employees globally.
</p><p>For More information visit us on www.sapiens.com.
</p><p>Sapiens is an equal opportunity employer. We value diversity and strive to create an inclusive work environment that embraces individuals from diverse backgrounds.
</p></div></div></div></div></div></div><div><div><div><div><div><h2 class="jobSectionHeader"><b>Your Recruitment Journey</b></h2>
<p>We will keep you in the loop, as we focus on providing an inclusive screening and interview process. Each country has a local flavor, but here's what you can expect during our recruitment process:
</p></div></div></div></div></div><p></p><div><div><div><div><div><div><div><div><h5 class="jobSectionHeader"><b>Apply
</b></h5><p>Take the first step in our journey by submitting an application that reflects your skills, experiences, and professional aspirations.
</p></div></div><div></div><div>1</div>
</div><p></p><div><div><div><h5 class="jobSectionHeader"><b>Review</b></h5>
<p>Your CV will be carefully reviewed by our talent team to explore how your unique skills and potential align with Sapiens' needs and culture
</p></div></div><div></div><div>2</div>
</div><p></p><div><div><div><h5 class="jobSectionHeader"><b>Interview</b></h5>
<p>This is your opportunity to shine! Meet with our team, showcase your abilities, and learn more about Sapiens
</p></div></div><div></div><div>3</div>
</div><p></p><div><div><div><h5 class="jobSectionHeader"><b>Offer</b></h5>
<p>If there's a great match, we'll extend an offer to welcome you to our team. This is the exciting moment when your new journey begins to take shape
</p></div></div><div></div><div>4</div>
</div><p></p><div><div><div><h5 class="jobSectionHeader"><b>Onboard</b></h5>
<p>Once you accept, we'll guide you through a comprehensive onboarding process, introducing you to your new colleagues, roles, and the exciting challenges ahead
</p></div></div><div></div><div>5</div>
</div></div></div></div></div></div><div><div><div><div><div><h5 class="jobSectionHeader"><b>Disclaimer</b></h5>
<p>Sapiens India does not authorize any third parties to release employment offers or conduct recruitment drives via a third party. Hence, beware of inauthentic and fraudulent job offers or recruitment drives from any individuals or websites purporting to represent Sapiens. Further, Sapiens does not charge any fee or other emoluments for any reason (including without limitation, visa fees) or seek compensation from educational institutions to participate in recruitment events.
<br>
Accordingly, please check the authenticity of any such offers before acting on them and were acted upon, you do so at your own risk. Sapiens shall neither be responsible for honoring or making good the promises made by fraudulent third parties, nor for any monetary or any other loss incurred by the aggrieved individual or educational institution.
<br>
In the event that you come across any fraudulent activities in the name of Sapiens, please feel free report the incident at sapiens to sharedservices@sapiens.com.</p></div></div></div></div></div></div><p></p>

Compliance Manager

Nanocore System

<p><b>Project Manager-( Info Sec)</b></p><p>Exp : 15+</p><p>Location : Chennai</p><p>Education : B. Tech / M. Tech / B.E</p><p>Mandatory skills:</p><p><b>Health care domain, Cyber Security, ISO 27001, NIST, GDPR, HIPAA.</b></p><p><b>JD</b></p><p>Highly experienced and strategic Cyber Security Group Manager to lead the cyber security team in protecting the organization/Customer&rsquo;s digital assets, infrastructure, and information. The ideal candidate will be responsible for overseeing security operations, risk management, incident response, and compliance initiatives, while ensuring alignment with business objectives and regulatory requirements.</p><p>● Manage multiple Cyber Security Projects across the globe.</p><p>● Lead and manage the cybersecurity team, including analysts, engineers, and incident responders.</p><p>● Need to manage Security Operation Manager from different projects and guide them to meet the Client requirements</p><p>● Develop and implement cybersecurity strategies, policies, and procedures.</p><p>● Collaborate with Client leadership to align with security objectives with business goals.</p><p>● Manage budgeting and resource allocation for cybersecurity initiatives.</p><p>● Must focus on new growth opportunities within the existing accounts/projects</p><p>● Oversee day-to-day security operations including monitoring, detection, and response to security threats</p><p>● Lead the design and implementation of security architecture across systems and networks.</p><p>● Ensure the organization&rsquo;s security tools and technologies are effectively deployed and maintained.</p><p>● Run the Operation without escalations from internal and client perspective</p><p>● Need to be proactive and client interactive to understand the requirement and provide appropriate solution</p><p>● Conduct regular risk assessments and security audits.</p><p>● Ensure compliance with relevant regulatory requirements such as <b>ISO 27001, NIST, GDPR,</b> <b>HIPAA</b>, etc.</p><p>● Manage third-party security assessments and vendor risk management.</p><p>● Develop and maintain the incident response plan (IRP).</p><p>● Lead incident response efforts and post-incident analysis.</p><p>● Coordinate with legal, compliance, and communication teams during incidents.</p><p>● Promote cybersecurity awareness throughout the organization.</p><p>● Provide training and guidance to employees and technical staff on security best practices.</p><p>● Able to showcase project deliverable to clients and internal stakeholders with weekly, monthly and quarterly performance metrics</p><ul><li>Bachelor&rsquo;s or Master&rsquo;s degree in Information Technology, Computer Science, or a related Engineering degree is a must.</li><li>Minimum 15 -18 years of experience in IT security, with at least 5 years in a managerial or leadership role.</li><li>Strong understanding of security frameworks (e.g., NIST, ISO 27001, CIS).</li><li>Experience with SIEM tools, firewalls, endpoint protection, vulnerability scanners, and identity &amp; access management.</li><li>Excellent leadership, communication, and project management skills.</li></ul><p><b>Preferred Certifications:</b></p><ul><li><b>CISSP </b>(Certified Information Systems Security Professional)</li><li><b>CISM </b>(Certified Information Security Manager)</li><li><b>CEH </b>(Certified Ethical Hacker)</li><li><b>CRISC, ISO 27001 Lead Implementer/Auditor</b></li></ul><p>Job Type: Full-time</p><p>Pay: Up to ₹3,000,000.00 per year</p><p>Benefits:</p><ul><li>Health insurance</li><li>Provident Fund</li></ul><p>Work Location: In person</p>

Project Manager-Information Security

Qiddiya | القدية

<div>
 Qiddiya Investment Company is seeking a talented and detail-oriented Assistant Manager - IT Security Design to join our dynamic cybersecurity team. In this role, you will assist in developing and implementing effective security designs and architectures to safeguard our information systems and resources. You will work closely with the IT and security management teams to ensure compliance with organizational policies, industry standards, and regulatory requirements.
 <br/>
 <br/>
 Support IT Security Design initiatives by contributing to solution architecture, developing HLDs/LLDs, and ensuring alignment with cybersecurity standards serving Qiddiya's corporate and its Assets
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Architect technical solutions to facilitate security initiatives, detect, evaluate, and track security vulnerabilities, create, and implement regulations, standards, frameworks, and procedures to reduce and prevent risks to the computing system
  </li>
  <li>
   Manage procurement and vendor relations and ensure that requests for proposals/requests for proposals are prepared in accordance with established procedures
  </li>
  <li>
   Enhances security team accomplishments and competencies by planning the delivery of solutions and answering technical questions
  </li>
  <li>
   Plans, researches, and designs security architecture for IT systems
  </li>
  <li>
   Develops, reviews, and approves installation requirements for LANs, WANs, VPNs, firewalls, routers, and related network devices
  </li>
  <li>
   Determines security protocols by evaluating business strategies and requirements
  </li>
  <li>
   Responds to, and investigates, security incidents and provides thorough post-event analyses
  </li>
  <li>
   Develops project timelines for ongoing system upgrades
  </li>
  <li>
   Reviews system security measures and implements necessary enhancements
  </li>
  <li>
   Conducts regular tests and monitoring of network security
  </li>
  <li>
   Verifies security systems by developing and implementing test scripts
  </li>
  <li>
   Updates job knowledge by tracking and understanding emerging security practices and standards, participating in educational opportunities, reading professional publications, and participating in professional organizations
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   - Bachelor's Degree in Information Systems, Computer Science, Security, or related field
  </li>
  <li>
   - 6+ years of experience Designing, configuring, maintaining, and troubleshooting Firewalls, Mail and Web Gateways, etc
  </li>
  <li>
   - Certified Information Security Manager (CISM), or equivalent certifications
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Benefits
  <br/>
  <br/>
 </strong>
 Comprehensive benefits package
</div>


Assistant Manager - IT Security Design

Qatar Foundation

<div>
 <p>
  The Manager, IT Applications and Governance will be responsible to manage the Information Technology (IT) systems throughout Pre-University Education (PUE).
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Result Areas:
  </strong>
 </p>
 <ul>
  <li>
   Lead the planning and optimization of academic systems (e.g., PowerSchool, ManageBac) and business systems, e.g., ERP (Enterprise Resource Planning), and CRM (Customer Relationship Management) to support teaching, learning, and administrative excellence
  </li>
  <li>
   Analyze business and educational requirements to shape short- and long-term strategies for enterprise systems, data governance, and systems integration
  </li>
  <li>
   Drive the selection, deployment, and lifecycle management of academic and operational platforms, ensuring alignment with evolving needs
  </li>
  <li>
   Drive digital transformation initiatives and innovation in application services.
  </li>
  <li>
   Develop, implement and maintain IT governance frameworks to ensure consistent policies, procedures, and controls across all systems and platforms
  </li>
  <li>
   Lead compliance efforts related to data protection, privacy, and regulatory standards within educational and business operations
  </li>
  <li>
   Collaborate with QF IT, Legal, and Safety &amp; Security teams to manage system-related risks and ensure alignment with institutional and regulatory guidelines
  </li>
  <li>
   Lead periodic risk assessments, vulnerability management, and security audits across all platforms
  </li>
  <li>
   Respond to security incidents and coordinate cross-functional investigations and remediation efforts. Conduct security awareness programs and promote a culture of cybersecurity across users and administrators
  </li>
  <li>
   Develop a plan and a budget for implementation of the approved strategy that provides maximum value for investment; ensure that work is delivered on time and under budget
  </li>
  <li>
   Develop Information Security policies, procedures, standards, and guidelines based on best practices and internal compliance requirements, and ensure their dissemination, acknowledgment, and compliance throughout the organization; manage IT security projects
  </li>
  <li>
   Monitor information security related to the systems and workflow at PUE centers &amp; schools and conduct regular periodic security audits to ensure that adequate security controls are in place
  </li>
  <li>
   Create, manage, and maintain user security awareness training for PUE centers &amp; schools
  </li>
  <li>
   Conduct security research to keep abreast of the latest security issues
  </li>
  <li>
   Keep abreast of developments in educational applications
  </li>
  <li>
   Other reasonable tasks as assigned by supervisor
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Minimum Knowledge, Skills &amp; Experience:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor's degree in Engineering, Computer Science, Management Information Systems, or a related field; Master&rsquo;s is preferred
  </li>
  <li>
   CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), ISO 27001, ISO 9001, PMP (Project Management Professional), or ITIL (Information Technology Infrastructure Library) certifications are an advantage
  </li>
  <li>
   8-10 years of progressively responsible IT project management, information security policy development, risk analysis, and compliance testing experience in an educational environment, 3 of which at a supervisory level
  </li>
  <li>
   Experience with PowerSchool, project management software, and Oracle ERP (Enterprise Resource Planning)
  </li>
  <li>
   Outstanding analytical, project management, and time management skills
  </li>
  <li>
   Excellent spoken English skills with the ability to draft and edit a variety of written reports and communications and to articulate ideas clearly and concisely; Arabic proficiency is an advantage
  </li>
  <li>
   Proficiency in MS Office applications
  </li>
 </ul>
</div>


Manager, IT Applications and Governance (PUE)

code guardian tech international private limited

<p>Job Summary:</p><p>We are seeking an experienced and highly skilled SOC &amp; IT Security Manager to lead our Security Operations Center and manage overall cybersecurity activities. The ideal candidate will oversee threat monitoring, incident response, compliance, and IT infrastructure security. This role requires strong leadership, deep technical expertise, and extensive experience handling real-world cyber incidents.</p><p>Key Responsibilities:</p><p>1. Oversee end-to-end SOC operations, including monitoring, detection, triage, incident response, and recovery.</p><p>2. Supervise and mentor a team of SOC analysts, IT security engineers, and incident responders. 3. Conduct incident analysis, root cause analysis (RCA), log analysis, and suggest preventive measures.</p><p>4. Manage daily IT infrastructure security operations across systems, networks, and cloud environments.</p><p>5. Develop and implement security policies, playbooks, and standard operating procedures. 6. Ensure compliance with industry standards and regulatory frameworks (ISO 27001, NIST, PCI-DSS, GDPR, CERT-In, NCIIPC).</p><p>7. Oversee deployment and management of security tools (SIEM, EDR, IDS/IPS, vulnerability scanners, etc.)</p><p>8. Lead threat hunting activities and investigate suspicious activities using MITRE ATT&amp;CK framework.</p><p>Required Qualification:</p><p>1. B.E/B.Tech / MCA / MBA / PG in Computer Science or IT-related fields with (Minimum 60% aggregate / First Division).</p><p>2. CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager).</p><p>3. Additional certifications in SIEM, SOC operations, incident response, cloud security, or threat intelligence preferred.</p><p>4. Deep knowledge of security frameworks: ISO 27001, NIST, CIS, MITRE ATT&amp;CK.</p><p>5. Experience in critical sectors such as BFSI, Telecom, Power &amp; Energy, Government, or IT Services.</p><p>6. Hands-on experience with SIEM, EDR, IDS/IPS, and vulnerability management platforms.</p><p>Required Skills:</p><p>1. Strong experience managing Security Operations Centers (SOC).</p><p>2. Expertise in incident handling, threat monitoring, and cyber forensics.</p><p>3. Strong understanding of endpoint, network, and cloud security (AWS/Azure/GCP). 4.Experience handling real-world incidents such as malware attacks, breaches, DDoS, etc.</p><p>5. Exposure to governance, risk, and compliance (GRC) initiatives.</p><p>6. Experience writing security reports, dashboards, policies, and executive summaries.</p><p>Job Type: Full-time</p><p>Benefits:</p><ul><li>Provident Fund</li></ul><p>Work Location: In person</p>

SOC & IT Security (Manager)

Search 10000+ Information security manager jobs near you this January. New roles added regularly across leading industries. Apply today.