Senior Manager Cybersecurity

Job Description

Roles and Responsibilities Cybersecurity Strategy & GovernanceDrive the cybersecurity strategy, ensuring alignment with business objectives.Develop and implement security policies, frameworks, and best practices to enhance the organization’s security posture.Act as a key security advisor to stakeholders, providing risk-based recommendations.Work with legal, compliance, & product teams to align security with business goals.Cloud & Application SecurityOversee multi-cloud security best practices, ensuring secure configurations, IAM policies, and compliance.Drive container security, API security, and cloud workload protection strategies.Secure web applications, APIs, and microservices against OWASP Top 10 threats.Drive secure coding initiatives, integrating security into the SDLC (Shift-Left Security).Vulnerability Management & Threat IntelligenceLead Vulnerability Assessment & Penetration Testing (VAPT) programs across applications, APIs, cloud, and infrastructure.Manage threat intelligence, attack surface monitoring, and remediation strategies.Collaborate with engineering teams to remediate security vulnerabilities, misconfigurations, and security gaps.Incident Response & Security OperationsEstablish Incident Response plans, playbooks, SOC capabilities to mitigate cyber threatsOversee cloud-native and other security monitoring solutions to detect, investigate, and respond to incidents.Lead post-incident investigations and analysis to enhance security operations. Compliance, Risk & Audit ManagementEnsure compliance with ISO 27001, PCI DSS, SOX, GDPR, DPDP , SOC 2, and other regulatory standards.Conduct security risk assessments, audits, and gap analysis, ensuring audit readiness.Manage vendor security assessments, and security certificationsLead responses to client security audits, questionnaires, and compliance assessments.Security Awareness & Architecture OptimizationConduct security awareness training, promote a cybersecurity culture, and drive security initiatives across the organization.Refine security architecture reviews to align with evolving threat landscapes and emerging technologies.Provide strategic recommendations to optimize security design and reduce risk.