security governance manager

Accenture

<div><div><h2 class="jobSectionHeader"><b>About Accenture</b></h2><p>
Accenture is a leading global professional services company that helps the world&rsquo;s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services&mdash;creating tangible value at speed and scale. We are a talent and innovation-led company serving clients in more than 120 countries.</p><p></p><h2 class="jobSectionHeader"><b>
The Work</b></h2><p>
Join us in shaping the future of security delivery governance! As a <b>Security Delivery Senior Manager</b>, you will act as a subject matter expert with deep knowledge and experience, influencing and advising on key decisions while engaging with multiple teams. Your contributions will provide innovative solutions to complex problems across various domains, strengthening enterprise security posture and protecting critical assets.</p></div><p></p><div><h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2><ul><li><p><b>
Design and implement security solutions</b> that align with enterprise security policies and frameworks.</p></li><li><p><b>
Govern enterprise security tools and architecture frameworks</b>, ensuring compliance and operational excellence.</p></li><li><p><b>
Build and enhance digital identity, platform security, and cloud security measures</b> to safeguard critical assets.</p></li><li><p><b>
Establish and oversee Security Operations Centers (SOC)</b> to effectively detect, analyze, and respond to cyber threats.</p></li></ul></div></div>
<br>
<div><div><h2 class="jobSectionHeader"><b>What You Need</b></h2><ul><li><p><b>
Expert proficiency in Security Delivery Governance</b> and compliance frameworks.</p></li><li><p><b>
Expert proficiency in Security Quality Assurance</b>.</p></li><li><p>
Minimum <b>8 years of relevant experience</b> in security delivery or governance roles.</p></li><li><p><b>
Bachelor&rsquo;s degree</b> in Computer Science, Cybersecurity, or related field.</p></li></ul><h2 class="jobSectionHeader"><b>
Bonus Points</b></h2><ul><li><p>
Expert proficiency in <b>Splunk Security Information and Event Management (SIEM) Operations</b>.</p></li></ul></div></div><p></p>

Security Delivery Senior Manager

Arpatech

<p>Job Title: Information Security Manager<br/>Location: Karachi (on-site)<br/>Shift: 9 AM to 6 PM<br/>We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.<br/>Key Responsibilities:<br/>-Lead and manage enterprise-wide information security initiatives.<br/>-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).<br/>-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).<br/>-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.<br/>-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.<br/>-Act as a key liaison during security audits and assessments.<br/>-Promote awareness and training to build a strong internal security culture.<br/>-Strong understanding of SDLC.<br/>Requirements:<br/>-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).<br/>-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.<br/>-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.<br/>-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.<br/>-Proven track record in security compliance, governance, and risk management.<br/>-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.<br/>-Industry certifications such as CISSP, CISM, or CISA are a strong plus.<br/>Strong understanding of SDLC.<br/>Job Type: Full-timeWork Location: In person</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

Information Security Manager/ Pre-sales Manager Information Security

Digitalxc.com

<ul><li>Lead our Information Security Management Program <b>(ISMP).</b></li><li>Maintain compliance with <b>HITRUST, ISO 27001, HIPAA, GDPR, NIST, and SOC 2</b>.</li><li>Lead efforts to <b>achieve and maintain ISO/IEC 42001 certification</b>. And drive continuous improvement of AI governance, compliance, and risk management processes.</li><li>Manage internal and external <b>audits, assessments, and certifications</b>.</li><li>Oversee <b>policies, procedures, and risk management activities</b>.</li><li>Perform and document <b>risk assessments</b> across systems, vendors, and processes. Develop and track <b>risk treatment plans</b>, ensuring timely remediation.</li><li>Conduct vulnerability scans to identify the vulnerabilities and recommend mitigation measures.</li><li>Investigate and respond to security incidents, ensuring timely resolution and documentation.</li><li>Manage <b>security awareness trainings</b></li><li>Conduct BCP and Incident response plan testing and ensure the readiness to handle real scenarios.</li><li>Partner with IT, Engineering, and Business teams to embed <b>security by design</b>.</li><li>Act as the primary point of contact for SOC engineers to ensure timely response, investigation, and remediation of security alerts and incidents.</li><li>Coordinate with the <b>background verification service provider</b> to initiate and track employee background checks and ensure all checks are completed as per policy.</li><li>Stay updated on emerging threats, vulnerabilities, and regulatory requirements.</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: ₹800,000.00 - ₹1,200,000.00 per year</p><p>Benefits:</p><ul><li>Flexible schedule</li><li>Provident Fund</li><li>Work from home</li></ul><p>Application Question(s):</p><ul><li>What is your current CTC?</li><li>What are your salary expectations?</li><li>What is your Notice Period?</li><li>Where is your base location?</li><li>Please specify your experience in </li></ul><p>HITRUST, <br/>ISO 27001<br/>HIPAA<br/>GDPR<br/>NIST?</p><p>Work Location: Remote</p>

Security & Compliance Lead Manager

InMobi

<div></div><div><div><div><b>InMobi Advertising</b> is a global technology leader helping marketers win the moments that matter. Our advertising platform reaches over 2 billion people across 150+ countries and turns real-time context into business outcomes, delivering results grounded in privacy-first principles. Trusted by 30,000+ brands and leading publishers, InMobi is where intelligence, creativity, and accountability converge. By combining lock screens, apps, TVs, and the open web with AI and machine learning, we deliver receptive attention, precise personalization, and measurable impact.</div>
<div>
Through <b>Glance AI,</b> we are shaping AI Commerce, reimagining the future of e-commerce with inspiration-led discovery and shopping. Designed to seamlessly integrate into everyday consumer technology, Glance AI transforms every screen into a gateway for instant, personal, and joyful discovery. Spanning diverse categories such as fashion, beauty, travel, accessories, home d&eacute;cor, pets, and beyond, Glance AI delivers deeply personalized shopping experiences. With rich first-party data and unparalleled consumer access, it harnesses InMobi&rsquo;s global scale, insights, and targeting capabilities to create high impact, performance driven shopping journeys for brands worldwide.</div>
<div>
Recognized as a Great Place to Work, and by MIT Technology Review, Fast Company&rsquo;s Top 10 Innovators, and more, InMobi is a workplace where bold ideas create global impact. Backed by investors including SoftBank, Kleiner Perkins, and Sherpalo Ventures, InMobi has offices across San Mateo, New York, London, Singapore, Tokyo, Seoul, Jakarta, Bengaluru and beyond.</div>
<div>
At<b> InMobi Advertising</b>, you&rsquo;ll have the opportunity to shape how billions of users connect with content, commerce, and brands worldwide. To learn more, visit www.inmobi.com</div>
</div><div></div><div><div><b>
About the job</b></div>
<div><b>
What does the team do?</b></div>
<div>
Opportunity is part of the evolving cybersecurity group, which is laser-focused on setting up industry benchmarks in managing &amp; guarding against digital risks in a &ldquo;Cloud Native- DevOps Only&rdquo; environment. It is a lean-mean-special action group where every cyber sentinel gets an opportunity to work across domains, has the independence to challenge the status quo &amp; mature cyber practices. Our core competence revolves around &ldquo;Product &amp; Platform security&rdquo;, &ldquo;Cloud Native Risk Management&rdquo;, and &ldquo;Detection &amp; Response&rdquo;.</div>
<div><b>
What will you be doing?</b></div>
<ul>
<div>Own the technology risk management practice and concentrate efforts on continuous improvement in the GRC function aligned to global standards like NIST CSF, ISO 27001, ISO 31000, Cloud Security Alliance, etc.</div>
<div>Develop and maintain cybersecurity policies, procedures, and standards that are aligned with global standards.</div>
<div>Own, operate, and improvise a vendor risk management program.</div>
<div>Evaluate emerging technologies for their adoption to strengthen InMobi&rsquo;s defences.</div>
<div>As part of risk management, perform periodic and on-demand risk assessment through process-level walkthroughs, control testing, etc., for the identification and assessment of IT risks and controls.</div>
<div>Ensure ISO27001 certification is sustained for our certified entities and work towards obtaining fresh certification for uncertified ones</div>
<div>Drive SOC2 Type 1 and Type 2 reporting effort by coordinating with all relevant business units</div>
<div>Effectively drive risk remediation through persistent communication, validation, and influence with our key stakeholders.</div>
<div>Maintain risk register and develop IT Risk Management metrics and reports.</div>
<div>Improve compliance with security standards and policies across various related entities, business units, products, and third parties.</div>
<div>Monitor open third-party security issues and remediation actions associated with security control gaps to ensure timely closure.</div>
<div>Provide subject matter expertise to teams that seek Infosec approval by evaluating and solving with Security as a core consideration.</div>
<div>Drive information security awareness programs by regularly conducting workshops to educate employees about information security and best practices.</div>
<div>Respond to Clients&rsquo; Request For Proposal/Information (RFP/RFI) by answering the questionnaire.</div>
<div>Review information security clauses in client and vendor contracts and ensure it is in line with our policies and practices on the ground.</div>
<div>Lead the data governance/data exchange program by having a handle on all intra-company data transfers, ensuring our data is safe and within our control.</div></ul><br>
<div></div>
<div><b>
What is expected of you?</b></div>
<ul>
<div>4-6 years of experience in the information security &amp; risk management domain.</div>
<div>Zealous to unlearn &amp; re-learn risk management practices in a &ldquo;Cloud Native - DevOps Only&rdquo; environment.</div>
<div>Strong understanding of security governance, compliance and risk management principles.</div>
<div>Strong understanding of mitigation methodologies and regulatory requirements about information security, privacy, and/or data security.</div>
<div>Ability to work independently with little direction and/or supervision.</div>
<div>Superior communication skills with the ability to ask questions, escalate roadblocks early, and interact effectively at multiple levels in the organization.</div>
<div>Keen attention to detail with the ability to correct on the fly and work independently.</div>
<div>Analytical aptitude with an emphasis on investigative, methodical, critical questioning and logical thinking; a data-driven decision maker.</div>
<div>Mindset to standardize &amp; maximise automation in the security &amp; risk management space.</div>
<div>High business acumen &amp; ability to understand business objectives, technology stack, and evolve security as a business enabler capability.</div>
<div>Ability to operate, decide &amp; evolve in ambiguous situations.</div>
<div>Curious to learn &amp; adopt emerging technologies.</div>
<div>Holds vendor-neutral information security certifications (desirable).</div>
</ul></div><div><div><b>
The InMobi Culture</b></div>
<div>
At InMobi, culture isn&rsquo;t a buzzword; it's an ethos woven by every InMobian, reflecting our diverse backgrounds and experiences.</div>
<div>
We thrive on challenges and seize every opportunity for growth. Our core values &mdash; thinking big, being passionate, showing accountability, and taking ownership with freedom &mdash; guide us in every decision we make.</div>
<div>
We believe in nurturing and investing in your development through continuous learning and career progression with our InMobi Live Your Potential program.</div>
<div>
InMobi is proud to be an Equal Employment Opportunity employer and is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the hiring process and in the workplace.</div>
<div>
Visit https://www.inmobi.com/company/careers to better understand our benefits, values, and more!</div></div></div>

Senior Information Security Analyst (GRC)

<p>Job Title: Information Security Manager</p><p>Location: Karachi (on-site)</p><p>Shift: 9 AM to 6 PM</p><p>We&rsquo;re looking for an experienced Information Security Manager to lead our organization&rsquo;s security operations, compliance efforts, and governance strategy while fostering a culture of cyber resilience across all departments. You&rsquo;ll be responsible for designing and implementing robust security frameworks, ensuring regulatory compliance, managing risks, and driving proactive threat detection and response strategies.</p><p>Key Responsibilities:</p><p>-Lead and manage enterprise-wide information security initiatives.</p><p>-Oversee SOC operations and implement SIEM solutions (experience with Wazuh is highly preferred).</p><p>-Drive vulnerability management and coordinate with DevOps teams to embed security in CI/CD pipelines (DevSecOps).</p><p>-Develop, maintain, and enforce information security policies, standards, and procedures aligned with frameworks such as ISO 27001, NIST, and other industry best practices.</p><p>-Own the organization&rsquo;s GRC (Governance, Risk, and Compliance) function and ensure adherence to relevant laws, regulations, and frameworks.</p><p>-Act as a key liaison during security audits and assessments.</p><p>-Promote awareness and training to build a strong internal security culture.</p><p>--Strong understanding of SDLC.</p><p>Requirements:</p><p>-Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Information Systems, or a related field (Master&rsquo;s degree is a plus).</p><p>-Minimum 8 years of experience in Information Security, with at least 4 years in a leadership or managerial role.</p><p>-Strong understanding of security frameworks like ISO 27001, NIST, and risk management methodologies.</p><p>-Hands-on experience with SOC tools, SIEM platforms, vulnerability scanning, and DevSecOps practices.</p><p>-Proven track record in security compliance, governance, and risk management.</p><p>-Experience working with or managing Wazuh or similar SIEM platforms is highly desirable.</p><p>-Industry certifications such as CISSP, CISM, or CISA are a strong plus.</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

Information Security Manager

DUBAI PROPERTIES GROUP LLC

<p>An opportunity has arisen for an <strong>Assistant Manager – Cyber Security, Assurance & Risk</strong> to join <strong>Dubai Holding Asset Management</strong>. The main duties and responsibilities of this role:</p><ul><li>The role holder is responsible for supporting the implementation and monitoring of information security governance and compliance activities across DHAM and its entities.</li><li>This includes assisting with policy development, audits, awareness initiatives, and governance frameworks to ensure alignment with best practices (e.g., ISO 27001) and business requirements.</li><li>The role focuses on coordinating activities, maintaining documentation, and providing operational support to help strengthen the group’s overall</li></ul><p><strong>Cybersecurity & Risk Management</strong></p><ul><li>Support the IT and cybersecurity risk management framework, ensuring alignment with organizational objectives and regulatory requirements.</li><li>Identify, evaluate, and monitor technology-related risks across infrastructure, applications, cloud, and third-party vendors.</li><li>Work with stakeholders to implement mitigation measures, controls, and risk treatment plans.</li><li>Maintain the IT Risk Register, track remediation actions, and escalate risks/issues in line with governance processes.</li><li>Coordinate and conduct periodic risk assessments and workshops with business and IT stakeholders.</li><li>Track and report Key Risk Indicators (KRIs) and prepare risk dashboards and reports for management review.</li></ul><p><strong>Assurance & Compliance</strong></p><ul><li>Conduct assurance reviews and internal audits of security controls, IT processes, and regulatory compliance (e.g., ISO 27001, NIST, GDPR, UAE NESA, SCA).</li><li>Support internal and external audit engagements, ensuring timely closure of findings and recommendations.</li><li>Monitor assurance activities such as user access reviews, control checks, and compliance schedules.</li><li>Report on compliance status, exceptions, and remediation plans to management.</li><li>Maintain documentation and evidence to support governance, risk, and compliance (GRC) requirements.</li><li>Liaise with IT/security teams and vendors on incident reporting, documentation, and follow-up.</li></ul><p><strong>Policy, Governance & Awareness</strong></p><ul><li>Support the development, review, and enforcement of IT and cybersecurity policies, standards, and procedures.</li><li>Contribute to the implementation and continuous improvement of the IT Governance Framework, aligning with ISO 27001 and other standards.</li><li>Promote security awareness through training, communications, and awareness sessions across all business units.</li><li>Participate in governance and risk forums and support management reporting.</li></ul><p><strong>Disaster Recovery (DR) & Business Continuity (BCM)</strong></p><ul><li>Support the development, maintenance, and testing of Disaster Recovery (DR) and Business Continuity (BC) plans.</li><li>Coordinate DR/BC test planning, scheduling, execution, and documentation of results.</li><li>Track corrective actions, ensure remediation, and maintain centralized DR/BC documentation for audits and management reporting.</li></ul><p><strong>Operational & Project Support</strong></p><ul><li>Support group-wide information security, governance, and compliance initiatives.</li><li>Assist in managing IT governance and security projects, including coordination with vendors and service providers.</li><li>Gather data to identify gaps, support process improvements, and escalate issues where needed.</li><li>Track and report progress on information security and governance initiatives to senior management.</li></ul>

Assistant Manager – Cyber Security, Assurance & Risk

Tridy Consultancy & Training Services

<p><b>Risk Manager</b></p><p>Role Summary:</p><p>Develop, implement, and maintain a comprehensive IT governance framework that aligns with industry best practices and regulatory requirements (e.g., COBIT, ITIL).<br/>Define clear roles, responsibilities, and accountabilities for IT governance within the organization.<br/>Establish and maintain IT policies, standards, and procedures to govern the use, management, and security of IT resources.<br/>Develop and implement processes for IT risk management and mitigation.<br/>Monitor compliance with established IT policies, standards, and procedures.<br/>Develop IT governance reporting system for transparency and insights into the effectiveness and efficiency of the NPC IT infrastructure, processes, and controls.<br/>Conduct periodic IT governance audits and assessments to identify areas for improvement.<br/>Report on the effectiveness of the IT governance framework to senior management.<br/>Provide training and awareness programs on IT governance best practices to employees.<br/>Participate in advising and coaching of the NPC team on best practices, technologies, and processes related to the scope of work.</p><p><b>Qualifications and Skills</b></p><ul><li>Bachelor&rsquo;s degree in computer science, Information Technology, or a related field (Master's degree preferred).</li><li>10+ years of experience in IT management and governance roles.</li><li>In-depth understanding of IT governance frameworks, principles, and best practices.</li><li>Strong knowledge of risk management methodologies and frameworks.</li><li>Familiarity with relevant IT security standards and regulations like NIA, QCSF.</li><li>Excellent communication, collaboration, and problem-solving skills.</li><li>Strong analytical and critical thinking skills.</li><li>Excellent communication and interpersonal skills</li></ul><p>Job Types: Full-time, Permanent</p>

Risk Manager

Search 10000+ Security governance manager jobs near you this January. New roles added regularly across leading industries. Apply today.