Cyber Security Manager

Job Description – Cyber Security Manager

Company: Ecliptic Insight Ventures Pvt. Ltd.
Designation: Cyber Security Manager
Location: Navi Mumbai, Maharashtra
Experience: 6–8 Years
Qualification: B.Tech / B.E. in Computer Science, IT, Cyber Security, Electronics & Communication, or a relevant engineering discipline
Department: Information Security / IT

Position Overview

We are looking for an experienced Cyber Security Manager to lead the organization's Information Security Governance, Risk & Compliance (GRC) function. The ideal candidate will have strong expertise in ISO 27001, NIST frameworks, cyber risk management, security audits, policy development, and compliance documentation, along with an understanding of SOC operations, incident response, IAM/PAM, VAPT, data security, and OT/ICS security.

Key Responsibilities

1. Governance, Risk & Compliance (GRC)

• Lead and manage the Information Security GRC framework.
• Implement and maintain security controls aligned with ISO 27001, NIST, and applicable regulatory standards.
• Conduct security risk assessments, control evaluations, and risk treatment planning.
• Manage internal and external audits, compliance reviews, and closure of audit findings.
• Maintain risk registers, compliance trackers, control matrices, and security dashboards.
• Identify security gaps and recommend corrective and preventive measures.

2. Information Security Documentation

• Develop, review, and maintain information security policies, SOPs, standards, guidelines, and procedures.
• Prepare audit documentation, control frameworks, implementation guidelines, and compliance evidence.
• Create management reports, MIS, presentations, and security dashboards.
• Ensure all security documentation remains accurate, updated, and audit-ready.

3. SOC, SIEM & Incident Response

• Oversee SOC operations, security monitoring, and incident response processes.
• Coordinate incident investigation, escalation, remediation, and post-incident reviews.
• Identify opportunities to strengthen threat detection and security monitoring.

4. Security Technologies & Access Management

• Provide governance and oversight for IAM, PAM, VAPT, SSE, DLP, and endpoint security.
• Support data privacy and data security initiatives.
• Evaluate security solutions and recommend improvements based on organizational risks.

5. OT/ICS Security

• Identify and assess cybersecurity risks within Operational Technology (OT) and Industrial Control Systems (ICS) environments.
• Coordinate with IT, engineering, and OT teams to implement security controls, access management, monitoring, and risk mitigation measures.

6. Stakeholder Management & Communication

• Coordinate with IT, business teams, auditors, consultants, and external security vendors.
• Communicate cybersecurity risks, compliance requirements, and audit findings to senior management.
• Conduct security awareness sessions and support organizational compliance initiatives.
• Prepare and present periodic security governance and risk reports.

Required Skills & Competencies

• Strong expertise in Information Security GRC, cyber risk management, and compliance.
• Hands-on experience with ISO/IEC 27001 and NIST frameworks.
• Experience in security audits, risk assessments, and control implementation.
• Excellent knowledge of security policies, SOPs, documentation, and management presentations.
• Understanding of SOC/SIEM, incident response, IAM/PAM, VAPT, SSE, DLP, and endpoint security.
• Knowledge of data privacy, data protection, and OT/ICS security concepts.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Ability to manage multiple security initiatives independently.

Preferred Certifications

• CISM – Certified Information Security Manager
• ISO 27001 Lead Implementer / Lead Auditor
• CISA – Certified Information Systems Auditor
• CEH, CompTIA Security+, or other relevant cybersecurity certifications

Ideal Candidate:-

Candidates with a GRC-focused cybersecurity background, strong documentation and audit management skills, and practical experience with ISO 27001/NIST frameworks will be preferred. Candidates should also have sufficient technical understanding to oversee security operations and coordinate with specialized cybersecurity teams.

Interested candidates can share their updated CV at [email protected] or contact Rohit Mishra at 87960330116.

Pay: ₹2,000,000.00 - ₹2,200,000.00 per year

Benefits:

• Health insurance
• Life insurance
• Provident Fund

Work Location: In person