Director / AVP Information Security

Job Description

Overview:

You are an experienced and dynamic cybersecurity leader able to provide regional, executive-level support for a variety of programs and initiatives as well as manage the day-to-day operations of Cvent's India Information Security team based in Gurgaon, India.

In this role, you will be responsible for supporting regional teams to execute a variety of information security programs and processes as well as deliver solutions for technology risk management, data and infrastructure protection, customer security assurance, and compliance of Cvent's SaaS product platform and company computing resources.

In This Role, You Will:

1. Support Global Strategic Leadership:

- Collaborate with Global Information Security leadership and functional peers to maintain and implement a comprehensive information security strategy aligned with Cvent's business objectives as well as global SaaS product and corporate computing operations
- Collaborate with regional executive leadership to ensure adequate resourcing and support for Cvent India Information Security team operations and initiatives
- Provide executive-level support for regional security risk assessment and treatment activities as well as security operations
- Support global security governance and reporting activities, including regular updates to regional senior management

1. Team Management and Oversight:

- Lead and mentor the Cvent India Information Security team
- Maintain alignment and operational consistency between global and regional security teams
- Foster a culture of continuous improvement, innovation, and learning
- Ensure effective coordination and communication among teams and stakeholders

1. Application Cloud Security:

- Provide oversight and executive-level support for adoption of security best practices in software development and cloud security
- Oversee secure architecture design, threat modeling, vulnerability management, and full-stack security hardening

1. Security Operations:

- Provide technical oversight and support for security control design, implementation, and maintenance
- Support 24/7 monitoring, incident response, threat hunting, and threat intelligence

1. Compliance and Risk Management:

- Oversee activities to maintain compliance with industry standards and regulations (ISO 27001, ISO 27701, SOC 2, PCI, GDPR, CCPA, etc.)
- Support third-party vendor risk assessment and treatment activities
- Contribute to security policy and guideline development

1. Security Assurance:

- Support customer assurance activities to maintain trust in Cvent's security posture

1. Stakeholder Management:

- Act as liaison between global and regional teams and other departments
- Collaborate with Sales, Legal, and Product teams to address security concerns

1. Innovation and Continuous Improvement:

- Stay updated on emerging threats, technologies, and compliance frameworks
- Promote innovation and enhance security programs and team performance

Heres What You Need:

Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field; Master's preferred
- Relevant certifications such as CISSP, CISM, CRISC, or CCSP

Experience

- 15+ years in information security, including 8+ years in leadership
- Experience across cloud/infrastructure security, data protection, compliance, application security, vulnerability management, and incident response
- Proven experience in SaaS environments

Technical Skills

- Deep understanding of cloud security (especially AWS)
- Proficiency in DevSecOps, endpoint detection, SIEM, DLP, and SOC management
- Experience with IT asset, risk, and vulnerability management tools
- Strong grasp of secure development and threat response practices

Soft Skills

- Exceptional leadership and communication skills
- Strong stakeholder and executive management capabilities
- Business acumen with strategic alignment abilities
- Adaptable and resilient in dynamic environments

---