Senior Manager Information Security Compliance Mumbai

Job Description:

Monitor Company compliance with information security policies, standards, and regulations. Conduct regular audits and
assessments to identify areas of non-compliance and develop corrective action plans

• Develop, review, and update information security policies and procedures that align with industry standards
and regulatory requirements. Ensure that these policies are communicated to all employees and relevant
stakeholders.
• Monitor the Company compliance with information security policies, standards, and regulations. Conduct regular
audits and assessments to identify areas of non-compliance and develop corrective action plans.
• Create, update, and communicate information security policies, standards, and guidelines that align with
industry best practices and legal requirements.
• Ensure Company complies with applicable data protection laws, industry regulations, and contractual obligations
related to information security.
• Conduct regular risk assessments to identify potential security vulnerabilities and develop mitigation plans to
address them effectively.
• Develop and deliver information security awareness and training programs for employees, contractors, and
other relevant stakeholders to foster a security-conscious culture.
• Establish an incident response plan and lead the response efforts in case of security breaches, data leaks, or
other security incidents.
• Assess the security posture of third-party vendors and contractors to ensure they meet Company's security
standards before engaging in business relationships.
• Develop and implement incident response plans to address cybersecurity incidents effectively. Coordinate with
IT teams and relevant stakeholders to contain and mitigate the impact of security breaches.
• Coordinate and manage internal and external security audits to assess compliance with security policies and
regulatory requirements.
• Establish and maintain an information security governance framework, including the development of security
metrics and reporting to executive management.
• Oversee the implementation of data protection and privacy measures to safeguard sensitive data in
accordance with relevant data protection regulations.
• Implement security monitoring and detection systems to identify potential security threats or breaches
proactively.
• Collaborate with relevant teams to develop and test business continuity and disaster recovery plans to ensure
company can recover from security incidents and disasters effectively.
• Assess the security posture of third-party vendors and service providers to ensure they meet Company's information
security requirements. Review and monitor vendor contracts for security compliance.
• Regularly report on the status of information security compliance to executive management and other
stakeholders.