Senior Manager Information Security

Senior Manager – Platform & Infrastructure Security (PCI DSS & Cloud Security)

📍 Location: Bangalore (Hybrid - 3 Days/Week WFO)

💼 Experience: 15-20 Years

👥 Team Management: Mandatory

🔒 Key Skills: PCI DSS, Cloud Security, Security Compliance, ISO 27001, Risk & Audit Management

About the Role

We are looking for an experienced Senior Manager / Functional Security Architect to lead the Platform & Infrastructure Security (PIS) function. This leadership role is responsible for driving enterprise-wide security, compliance, governance, and cloud security initiatives while managing global teams and collaborating with senior stakeholders.

The ideal candidate will have extensive experience in PCI DSS compliance, cloud security governance, security audits, infrastructure security, and people leadership , with a proven track record of delivering large-scale security transformation programs.

Key Responsibilities

Security & Compliance Leadership

• Lead and drive organization-wide PCI DSS v4.0 compliance programs , certification, recertification activities, and audit readiness.
• Own and govern ISO 27001 , security controls, compliance frameworks, and risk management initiatives.
• Establish and maintain security-by-design practices across platform and infrastructure environments.
• Ensure compliance with organizational security policies, standards, and regulatory requirements.
• Lead SOC, ISMS, PCI, and compliance audit engagements while managing remediation activities.

Cloud Security & Governance

• Drive enterprise-wide Cloud Security strategy and adoption .
• Lead implementation of Cloud Security Guardrails , Policy-as-a-Service (POaaS), and security governance models.
• Partner with architecture, engineering, and platform teams to embed security across cloud-native environments.
• Define cloud security standards, risk controls, and compliance frameworks across multi-cloud ecosystems.

Security Programs & Risk Management

• Lead strategic security initiatives including:
• File Integrity Monitoring (FIM)
• Vulnerability Management
• Security Governance Programs
• Risk Register Management
• Privacy & Impact Assessments
• Security Exception Management
• Firewall Reviews
• Penetration Testing Governance
• Establish metrics, controls, and KPIs to measure security effectiveness and compliance maturity.

Stakeholder Management & Advisory

• Act as a trusted security advisor to senior leadership, platform teams, cloud teams, infrastructure teams, and compliance stakeholders.
• Collaborate with design authorities and business leaders to influence secure technology decisions.
• Present security strategies, compliance status, and risk posture to executive management.

People Leadership & Operational Excellence

• Lead, mentor, and develop high-performing global security teams.
• Foster a culture of accountability, collaboration, innovation, and continuous improvement.
• Drive resource planning, team capability development, performance management, and succession planning.
• Improve operational efficiency through automation, process optimization, and governance excellence.

Mandatory Requirements

✅ 15-20 years of experience in Information Security, Cyber Security, Infrastructure Security, Governance Risk & Compliance (GRC), or related domains.

✅ Strong PCI DSS experience (Mandatory) including audit preparation, certification, compliance management, and stakeholder engagement.

✅ Proven Cloud Security experience (Mandatory) across enterprise cloud environments.

✅ People Management experience (Mandatory) managing large security/compliance teams.

✅ Experience leading:

• Security Governance
• Risk Management
• Compliance Programs
• Audit Readiness
• Vulnerability Management
• Security Operations Governance

✅ Strong stakeholder and executive communication skills.

Preferred Qualifications

• CISSP
• CISM
• CISA
• CCSP
• PCI-ISA
• ISO 27001 Lead Auditor / Lead Implementer

Additional Advantage

• Experience with SOC audits and reporting.
• Strong understanding of NIST, ISO 27001, PCI DSS, and enterprise security frameworks.
• Experience working with cloud, platform, infrastructure, privacy, and security teams at enterprise scale.

Success Metrics

• Successful PCI DSS & ISO 27001 audit outcomes.
• Enhanced cloud security maturity and governance.
• Improved compliance posture and risk reduction.
• Stakeholder satisfaction and operational excellence.
• Team engagement, leadership effectiveness, and talent development.
• Increased automation and measurable security program efficiencies.

📩 Interested candidates with strong PCI DSS, Cloud Security, and People Management experience can share their profiles for further discussion.