Information Security Manager

Information Security Lead
Hyderabad, India | Full-time| 8–9 Years Experience

Work Mode:

- WFO
Notice:

- Immediate to 30days

About the Role
We're looking for a seasoned security leader with 8–9 years of experience to own and scale our enterprise security program. You'll set the strategic direction for information security and cyber risk, build board-level trust in our security posture, and lead a team through a period of rapid growth and technology transformation — including securing the AI systems now central to our product.

This role blends governance and strategy with genuine hands-on depth: you'll be as comfortable presenting risk themes to the board as you are stress-testing an LLM for prompt injection.
What You'll Do
Strategy & Governance
Define and drive the organization's information security and cyber risk strategy, aligned with business objectives.
Lead enterprise-wide Information Security Governance, Risk, and Compliance (GRC) initiatives — policy, standards, and control frameworks.
Build board-level visibility into security posture, priorities, governance maturity, and enterprise risk themes.
Ensure alignment with applicable regulations, standards, and audit requirements (ISO 27001, SOC 2, GDPR, PCI-DSS, NIST, CMMC/FedRAMP as applicable).
Cloud, Application & Infrastructure Security
Own cloud security posture across AWS, Azure, and GCP — including CNAPP, CSPM, and workload protection for cloud-native and containerized environments.
Embed security into the SDLC through Dev Sec Ops  practices: SAST/DAST, dependency scanning, and secure code review gates in CI/CD pipelines.
Lead security initiatives spanning cloud, application, infrastructure, and data protection, plus broader cyber resilience.
Own identity and access strategy — least-privilege access, MFA, and privileged access management (PAM).
Security Operations & Risk
Strengthen security operations through automation, proactive threat detection (SIEM/XDR), incident response, and vulnerability management.
Own incident response readiness — playbooks, tabletop exercises, and post-incident root-cause reviews.
Lead third-party and vendor risk management, including security assessments of critical vendors and supply-chain risk.
AI & Emerging Technology Security
Drive adoption of AI-led security capabilities — AI-driven threat detection, SOC automation, and governance over the organization's own use of AI/LLM tools.
Own security of the AI data pipeline: RAG access controls, vector database permissions, PII redaction in prompts and logs, and keeping customer data out of training and model memorization.
Define least-privilege scoping for non-human identities and AI agents that touch bookings, payments, or PII, with clear tool and function-call boundaries.
Evaluate third-party AI supply-chain risk — security review of model and API vendors, DPAs, and data-flow mapping for every external AI service.
Build AI-specific incident response playbooks covering model misbehavior, AI-assisted social engineering, and deepfake-driven fraud.
Threat-model agent workflows and build evaluation harnesses as part of a secure SDLC for AI features — not one-off checklist reviews.
Leadership & Culture
Provide leadership and direction across security functions while enabling business growth and technology transformation.
Partner closely with Dev Sec Ops , Engineering, IT Operations, Cloud, Product, Privacy, Audit, and Business teams.
Foster a strong security culture through awareness, enablement, accountability, and genuine business partnership.
What We're Looking For
Experience & Core Expertise
8–9 years of experience in Information Security / Cybersecurity leadership roles.
Strong track record in security governance, strategy, cyber risk management, and enterprise security…