Information Security Lead

Are you passionate about cybersecurity and data security? If your answer is a resounding yes, then we are hunting for you.

As an Information Security Lead, your primary role will be to play a crucial role in protecting its information assets and ensure the confidentiality, integrity, and availability of data. In addition, your goal will stretch to ensure a holistic and effective approach to information security. The role requires a combination of technical expertise, leadership skills, and a deep understanding of the organization's business processes and objectives. Furthermore, your collaboration with cross-functional teams will contribute to the development and maintenance of an enterprise Business Continuity and Disaster Recovery Program, safeguarding our ability to navigate challenges and disruptions effectively.

If you are a dynamic, results-oriented Information Security Lead who comes with a proven track record in steering MNCs toward unprecedented success, we invite you to seize this opportunity and make a profound impact on our global presence. Do you possess all the aforementioned skills and wish to make a difference in the world of food and technology? Join us now

About SmartQ

We are a leading B2B Food-Tech company built on 4 pillars-great people, great food, great experience, and greater good. Solving complex business problems with our heart and analyzing possible solutions with our mind lie in our DNA. We are on the perpetual route of serving our clients wholeheartedly. Armed with the stability of an MNC and the agility of a start-up, we have spread across 19 countries, having collaborated and executed successfully with 600 clients. We have grown from strength to strength with a blend of exuberant youth and exceptional experience. Bengaluru, being our headquarters is known as the innovation hub and we have grown up to be the global leader in the institutional food tech space. We were recently acquired by the world's largest foodservice company – Compass group which has an annual turnover of 20 billion USD.

To know more about the 5 key pillars that surround our culture check out our LinkedIn 'Life' page. You will be amazed to be a part of our growth story - https://www.linkedin.com/company/smartq-bottlelabs/life/cdc290f8-ff81-4e7f-9c96-37d842f936c4/?viewAsMember=true

Key roles and responsibilities:

• Develop, update, and maintain comprehensive information security and data privacy policies aligned with industry standards and regulatory requirements.
• Utilize strong IT administration skills to support and optimize our technical operations, ensuring a secure and efficient IT environment
• Plan, coordinate, and execute internal audits across diverse functions, evaluating adherence to information security policies and procedures
• Identify and mitigate information security risks through meticulous risk assessment, proposing effective mitigation strategies and overseeing their implementation
• Exhibit proficiency in vendor management, conducting vendor risk assessments, and establishing secure and reliable vendor relationships
• Design and manage enterprise-wide security awareness training programs, imparting knowledge and best practices to our global workforce
• Implement and manage the IT Security Risk Management Framework, aligning security efforts with organizational goals and risk appetite
• Coordinate security assessments and audits conducted by external certification bodies and clients, ensuring ongoing compliance and effective incident resolution
• Establish information security objectives, provide monthly measurement and analysis reports to management, and continually enhance our security posture
• Conduct BIA, risk assessment and develop business continuity and disaster recovery programs, coordinating with the Crisis management & BCP team and actively participating in periodic annual DR tests
• Collaborate with cross-functional teams to develop and maintain an Enterprise Business Continuity and Disaster Recovery Program

Qualifications:

• Bachelor's degree in computer science, Information Technology, or a related field. Master's degree is a plus.
• Minimum 8+ years of experience in information security or related role
• Experience with cyber traceability frameworks and diligent adherence to principles of security components
• Proficiency in audit-ready protocols to ensure compliance and regulatory requirements are met
• Cloud security knowledge and experience, including securing cloud-based infrastructures, serverless architecture and services
• Demonstrated ethical hacking capabilities to proactively identify and address vulnerabilities, organizing and maintaining artifacts for documentation and accountability
• Skilled in training and mentoring teams to enhance security awareness and practices
• Strong understanding of secure design principles and their application in the development lifecycle
• Industry-recognized certifications such as CISSP, CISM, CISA, or equivalent is a plus
• Strong knowledge of security frameworks, standards, and best practices (ISO 27001, NIST, CIS, etc.)
• Experience with security technologies and tools, including firewalls, IDS/IPS, SIEM, VAPT, encryption, and multi-factor authentication
• Strong problem-solving skills and the ability to make decisions under pressure
• Experience with security incident response and business continuity planning

Message from CEO:

We've come to realize that we're not merely in the B2B Food service industry; we're in the business of 'Capturing Hearts.' We find ourselves in a unique position to turn ordinary, mundane corporate cafeterias into places of pure delight, where individuals can freely express themselves, find inspiration, and share happiness. Such a profound transformation opportunity is a rare gift, where the purpose of our enterprise transcends the ordinary. If this vision resonates with you, we invite you to join us in our mission to spread joy and happiness in a world weighed down by stress and pressure. Together, let's play our part in making this world a more beautiful place.