Information Security Lead

Job Opening: InfoSec (Mid/Senior)

Location: Mumbai
Experience: 7-10 years

About Antal:

Antal International, East Patel Nagar Delhi, is a leading recruitment consultancy having expertise in connecting top talent across IT, Manufacturing and FMCG industries with leading organizations.

About the role:

We are seeking an experienced Information Security team member to lead our cybersecurity and information security function. In this role, you will drive the organization's security strategy, oversee governance, risk, compliance, and SOC operations, while ensuring adherence to industry standards such as ISO 27001, PCI-DSS, and CERT-In. You will collaborate with cross-functional teams and senior leadership to implement robust security frameworks, strengthen cyber resilience, and safeguard critical business assets.

Key Responsibilities

• Manage the operation and implementation of the IT security strategy
• Conduct a continuous assessment of current IT security practices and systems and identifying areas for improvement
• Develop, maintain & oversee Information Security policies, processes and standards/ guidelines to address applicable regulatory, PCI DSS & ISO 270001 requirements
• Set & manage the compliance program for Information & Cyber Security Requirements (e.g. regulatory standards, ISO27001, PCI-DSS CERT-In)
• Deliver new security technology approaches and implementing next generation solutions
• Develop and implement business continuity plans in respect of information security
• Communicate digital programs and strategy to a range of stakeholders including senior management, employees, vendor partners, etc.
• Manage and monitor the IT security budget

Required Skills & Expertise

• Digital leadership skills capable of empowering and leading an IT security team to meet business and IT security goals
• Strong understanding of security architecture, including web & cloud technologies and network architecture
• Experience in driving and governing audits and practice standardization (PCI, SoX, etc) across multiple teams
• Experience in collecting, analysing, and presenting metrics related to information security (training feedback, new content, updated incentive programs)
• Knowledge of and experience with technologies and processes such as networks, encryption, vulnerability management, identity and access management, endpoint management, DLP, risk management, and cloud services
• Familiarity and understanding of OWASP guidelines
• Knowledge of attacker life cycles and defender strategies
• Expert problem solver, using proven methods to solve difficult issues effectively
• Proven conflict management skills and remains composed under pressure

What Were Looking For

• Self-driven professional with strong ownership mindset
• Ability to work in a fast-paced, collaborative environment
• Strong attention to detail and commitment to quality