Senior Manager

Role & responsibilities :

• Execute internal risk and compliance assessments aligned with ISO 27001, ISO 22301, ISO 27701, SOC 1 & SOC 2
• Perform control testing and facility assessments against inscope standards
• Maintain and update the enterprise risk register and develop consolidated risk views
• Create risk dashboards, metrics, and management reports
• Identify gaps and noncompliances and drive remediation with stakeholders
• Support endtoend certification and audit lifecycle, including external audits
• Assist with scoping and develop calendarized monitoring schedules
• Drive security awareness and promote a riskaware culture
• Stay updated on information security threats and best practices
• Participate in additional risk and compliance initiatives as required

Preferred candidate profile :

• 8-9 years of experience in information security risk, audit, or compliance
• Minimum 3 years handson experience in ISO 27001 & SSAE 18 / SOC assessments
• Working knowledge of ISO 22301, ISO 27701, PCI (ISO 42001 is a plus)
• Experience in risk assessment, remediation, and stakeholder management
• Strong analytical, reporting, and dashboarding skills
• Ability to manage multiple initiatives independently

Preferred Certifications :

• CISA, CRISC, Security+ or equivalent security certifications

Education :

• Bachelors or Masters degree (BE/BTech/BSc preferred) in IT, Computer Science, or related fields