Information Security Lead

About the role

We are seeking an experienced Information Security Lead to strengthen the cyber resilience of a leading financial services organization. Reporting to the Chief Information Security Officer, you will drive security governance, operations and risk mitigation across the enterprise.

Key responsibilities

• Lead Information Security governance, including policies, standards, ISMS and regulatory compliance.
• Conduct security assessments and thematic reviews, identify risks and drive remediation.
• Manage vulnerability management, VAPT and red‑team activities and ensure remediation to closure.
• Coordinate with the 24x7 SOC for SIEM monitoring, threat detection, incident escalation and response.
• Oversee attack surface management and external threat monitoring, including phishing, impersonation and exposed asset monitoring.
• Lead Data Loss Prevention initiatives and strengthen data protection controls.
• Provide security‑by‑design advisory for technology projects, including cloud, applications and APIs.
• Drive organizational security awareness through training, campaigns and simulations.
• Develop and monitor security KPIs/KRIs and report cyber posture to management and governance committees.
• Support the CISO in strategy, risk management, audits and Board‑level reporting.

Required profile

• 3–5 years of experience in information security, cybersecurity, IT governance or risk.
• Bachelor’s degree in IT, cybersecurity, computer science or a related discipline.
• Professional certifications such as CISA, CISM, CISSP or ISO 27001 (preferred).
• Strong analytical, communication and stakeholder management abilities.
• Proven ability to lead initiatives independently.

Required skills

• SOC, SIEM, EDR
• Vulnerability Management, VAPT, Red Teaming
• Firewalls, Web Application Firewall (WAF)
• Threat Intelligence and external threat monitoring
• Attack Surface Management, phishing and impersonation detection
• Data Loss Prevention (DLP)
• Security‑by‑Design for cloud, applications and APIs
• Knowledge of ISO 27001, NIST, CIS Controls, MITRE ATT&CK, COBIT