Associate Principal - Information Security.
This mandate is run by SYMPHONI HR, a Mumbai-based executive search firm, est. 2003. Applications are email-verified and reach the search team running the role — confidentially, always.
About the organisation.
A leading global consulting firm delivering data, analytics and AI-driven solutions to enterprises worldwide. The organisation is known for its fast-paced, research-led culture and its commitment to building trust with clients through robust security and compliance practices.
About the role.
The Associate Principal - Information Security will lead enterprise security governance, risk and compliance programs, including audits, cloud security and customer assurance. You will act as a trusted advisor to senior leadership, clients and vendors, ensuring the organisation's security posture meets international standards. This is a Work From Office role based in Bengaluru.
What you will do.
- Lead enterprise information security governance, risk management and compliance programs across the organisation.
- Own and drive ISO 27001, SOC 2 and GDPR certification, audit and compliance activities.
- Oversee cloud security architecture, controls and incident response processes.
- Manage customer and vendor security assessments, questionnaires and assurance reviews.
- Define and maintain security policies, standards and risk frameworks aligned with industry best practices.
- Partner with senior business and technology stakeholders to drive security awareness and risk-based decision making.
- Lead, mentor and develop security teams, setting direction and priorities.
- Represent the organisation in client, audit and regulatory interactions on security matters.
What you bring.
- 12-15 years of experience in Information Security, with significant exposure to governance, risk and compliance.
- Strong hands-on expertise in ISO 27001, SOC 2 and GDPR.
- Proven experience in Security Governance & Risk Management.
- Solid knowledge of Cloud Security and Incident Response.
- Experience conducting customer and vendor security assessments.
- Strong stakeholder management and leadership capabilities.
- Preferred certifications: CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer.
Other open roles.
Principal Data Architect — Bengaluru · On-site
Transaction Processing Specialist — Kolkata · On-site
Delivery Manager — Hyderabad · Hybrid