Information Security Lead

Are you passionate about cybersecurity and data security? If your answer is a resounding yes, then we are hunting for you.As an Information Security Lead, your primary role will be to play a crucial role in protecting its information assets and ensure the confidentiality, integrity, and availability of data. In addition, your goal will stretch to ensure a holistic and effective approach to information security. The role requires a combination of technical expertise, leadership skills, and a deep understanding of the organization's business processes and objectives. Furthermore, your collaboration with cross-functional teams will contribute to the development and maintenance of an enterprise Business Continuity and Disaster Recovery Program, safeguarding our ability to navigate challenges and disruptions effectively.If you are a dynamic, results-oriented Information Security Lead who comes with a proven track record in steering MNCs toward unprecedented success, we invite you to seize this opportunity and make a profound impact on our global presence. Do you possess all the aforementioned skills and wish to make a difference in the world of food and technology? Join us nowAbout SmartQWe are a leading B2B Food-Tech company built on 4 pillars-great people, great food, great experience, and greater good. Solving complex business problems with our heart and analyzing possible solutions with our mind lie in our DNA. We are on the perpetual route of serving our clients wholeheartedly. Armed with the stability of an MNC and the agility of a start-up, we have spread across 19 countries, having collaborated and executed successfully with 600 clients. We have grown from strength to strength with a blend of exuberant youth and exceptional experience. Bengaluru, being our headquarters is known as the innovation hub and we have grown up to be the global leader in the institutional food tech space. We were recently acquired by the world's largest foodservice company – Compass group which has an annual turnover of 20 billion USD.To know more about the 5 key pillars that surround our culture check out our LinkedIn 'Life' page. You will be amazed to be a part of our growth story - roles and responsibilities:Develop, update, and maintain comprehensive information security and data privacy policies aligned with industry standards and regulatory requirements.Utilize strong IT administration skills to support and optimize our technical operations, ensuring a secure and efficient IT environmentPlan, coordinate, and execute internal audits across diverse functions, evaluating adherence to information security policies and proceduresIdentify and mitigate information security risks through meticulous risk assessment, proposing effective mitigation strategies and overseeing their implementationExhibit proficiency in vendor management, conducting vendor risk assessments, and establishing secure and reliable vendor relationshipsDesign and manage enterprise-wide security awareness training programs, imparting knowledge and best practices to our global workforceImplement and manage the IT Security Risk Management Framework, aligning security efforts with organizational goals and risk appetiteCoordinate security assessments and audits conducted by external certification bodies and clients, ensuring ongoing compliance and effective incident resolutionEstablish information security objectives, provide monthly measurement and analysis reports to management, and continually enhance our security postureConduct BIA, risk assessment and develop business continuity and disaster recovery programs, coordinating with the Crisis management & BCP team and actively participating in periodic annual DR testsCollaborate with cross-functional teams to develop and maintain an Enterprise Business Continuity and Disaster Recovery ProgramQualifications:Bachelor's degree in computer science, Information Technology, or a related field. Master's degree is a plus.Minimum 8+ years of experience in information security or related roleExperience with cyber traceability frameworks and diligent adherence to principles of security componentsProficiency in audit-ready protocols to ensure compliance and regulatory requirements are metCloud security knowledge and experience, including securing cloud-based infrastructures, serverless architecture and servicesDemonstrated ethical hacking capabilities to proactively identify and address vulnerabilities, organizing and maintaining artifacts for documentation and accountabilitySkilled in training and mentoring teams to enhance security awareness and practicesStrong understanding of secure design principles and their application in the development lifecycleIndustry-recognized certifications such as CISSP, CISM, CISA, or equivalent is a plusStrong knowledge of security frameworks, standards, and best practices (ISO 27001, NIST, CIS, etc.)Experience with security technologies and tools, including firewalls, IDS/IPS, SIEM, VAPT, encryption, and multi-factor authenticationStrong problem-solving skills and the ability to make decisions under pressureExperience with security incident response and business continuity planningMessage from CEO:We've come to realize that we're not merely in the B2B Food service industry; we're in the business of 'Capturing Hearts.' We find ourselves in a unique position to turn ordinary, mundane corporate cafeterias into places of pure delight, where individuals can freely express themselves, find inspiration, and share happiness. Such a profound transformation opportunity is a rare gift, where the purpose of our enterprise transcends the ordinary. If this vision resonates with you, we invite you to join us in our mission to spread joy and happiness in a world weighed down by stress and pressure. Together, let's play our part in making this world a more beautiful place.