Manager II - Information Security

Actively Reviewing the Applications

UST

India, Kerala, Trivandrum Full-Time On-site

Posted 9 hours ago • Apply by June 3, 2026

Job Description

Role Description

Key Responsibilities

Ensure adherence to internal policies and external regulatory standards such as ISO 27001, SOC 2, HITRUST, SOX, and ITGC.
Monitor changes in industry regulations and standards; update internal controls and documentation accordingly.
Collaborate with cross-functional teams (Security, Legal, Engineering, Product, etc.) to maintain a strong compliance posture.
Manage the end-to-end lifecycle of compliance certifications, including planning, renewals, and documentation.
Coordinate with internal teams and external auditors to ensure timely and successful certification processes.
Track certification timelines, dependencies, and renewal schedules to ensure ongoing compliance.
Plan and execute both internal and external audits (e.g., ISO, SOC 1/2, HITRUST, ITGC, SOX).
Liaise with auditors and internal stakeholders for evidence collection, review, and audit closure.
Track audit findings and follow up to ensure timely and effective remediation.
Conduct periodic risk and control assessments to identify compliance gaps and improvement opportunities.
Perform risk reviews and recommend mitigation strategies based on business impact and regulatory requirements.
Validate the effectiveness of implemented security controls through regular control testing.
Maintain audit-ready documentation and ensure controls are consistently up to date.

Qualifications & Skills

Bachelor’s or Master’s degree in Information Security, Computer Science, or a related field.
Experience in security compliance, audits, and certification management.
In-depth knowledge of frameworks and standards such as ISO 27001, SOC 2, HITRUST, SOX, and ITGC.
Hands-on experience with GRC platforms and audit management tools.
Familiarity with AI or automation tools for streamlining compliance and audit workflows.
Excellent communication, analytical, and stakeholder management skills.

Skills

Information Security, Security Compliance, ISO 270001, Audit