Security G&A (Governance and Administration) Manager

Department: G&A Operations

Employment Type: Full Time

Location: India

Reporting To: Shibanarayan Behera

• Create and implement a security governance framework that aligns with both business goals and industry regulations.
• Manage IdentityNow and Delinea Secret Server PAM solutions to secure privileged access across the organization.
• Develop and maintain security policies, standards, and procedures, ensuring they are understood and applied company-wide.
• Conduct regular risk assessments and implement mitigation strategies to protect against security threats.
• Ensure compliance with relevant security standards and regulations such as ISO 27001, HIPAA, and GDPR.
• Oversee security audits, assess the effectiveness of security controls, and identify areas for improvement.
• Manage third-party vendor security and continually seek opportunities to enhance the company’s security posture.

• A professional with a Bachelor's degree in Computer Science, Information Security, or a related field.
• A certified expert, preferably with CISSP or CISM.
• You have at least 10 years of experience in information security management or a similar field.
• Experienced in working with operating systems such as Windows, UNIX, Linux, and databases.
• Knowledgeable in IAM tools, particularly SailPoint and Delinea PAM.
• You have strong communication and interpersonal skills, with the ability to work both independently and as part of a team.
• Proficient in various scripting and programming languages (e.g., Java, Perl, Python, PowerShell), which is a plus.

• Expertise in conducting risk assessments and managing security risks.
• A proven track record of developing and implementing security policies and frameworks.
• Strong experience in incident response and managing security incidents.
• Thorough knowledge of security auditing, compliance, and maintaining security standards.
• Experience in managing relationships with third-party vendors and ensuring their security measures meet organizational standards.
• The ability to educate and raise security awareness across the organization.
• A technical understanding of security technologies, tools, and best practices.