Project Head - Infosec Governance
Job Description
Job Description:
\nDevelop and execute a business-aligned information security strategy for the delivery support function. Serve as the security advisor to senior business leaders, influencing decisions with risk-based insights.
\nRisk Management & Compliance : Identify, assess, and mitigate information security risks across delivery support operations. Ensure compliance with internal policies, regulatory requirements (e.g., GDPR, HIPAA), and industry standards (e.g., ISO 27001, NIST).
\nSecurity Governance : Establish and maintain security governance frameworks, including metrics, reporting, and continuous improvement plans. Lead security audits, assessments, and remediation efforts.
\nCollaboration & Integration : Partner with IT, legal, compliance, and delivery teams to embed security into project lifecycles and operational workflows. Act as a bridge between enterprise security and business units to ensure alignment and responsiveness.
\nIncident Response & Monitoring : Oversee incident response planning and execution for the business unit. Monitor threat intelligence and ensure proactive defence mechanisms are in place.
\nAwareness & Training : Drive security awareness and training programs tailored to delivery support teams. Promote a culture of security across all levels of the business unit.
\nQualifications :
\nBachelor s or Master s degree in information security, Computer Science, or related field.
\n10+ years of experience in information security, with at least 5 years in a leadership role.
\nProven experience as a BISO or in a similar business-facing security role.
\nCertifications such as CISSP, CISM, CISA, or CRISC preferred.
\nStrong understanding of delivery operations, risk management, and regulatory compliance.
\nExcellent communication, leadership, and stakeholder management skills
\n