Information Security Lead

Job Overview

We are seeking an Information Security Lead who owns the organization’s information security, data protection, and internal security controls. This is a hands-on role responsible for both defining security standards and actively implementing, operating, and continuously improving technical controls across company-managed devices, websites, applications, and systems.

The role combines strategic responsibility with day-to-day execution in protecting company data, intellectual property, and digital assets.

Key Responsibilities

• Owns information security and data protection, acting as the central point of contact for all related decisions and incidents.
• Define, implement, and maintain the organization’s security framework, including policies, standards, and risk-based controls.
• Identify, evaluate, select, and operate appropriate security tools and technical controls, including data loss prevention (DLP) measures.
• Implement and manage endpoint, device-level, and application controls to prevent unauthorized data exposure.
• Ensure secure data storage, transmission, backup, and access practices across all systems.
• Establish and operate monitoring, logging, and audit processes to detect, investigate, and respond to security risks and unauthorized activity, ensuring compliance with privacy and legal requirements.
• Conduct periodic risk assessments, security reviews, and control effectiveness evaluations.
• Assess and monitor third-party vendors, tools, and service providers from a security and data protection perspective.
• Provide practical guidance, training, and awareness programs to employees on secure data handling, acceptable use, and compliance best practices.
  
  

Qualifications & Requirements

• 5-7 years of experience owning and implementing information security and data protection in an organization
• Strong hands-on experience with endpoint security, access controls, monitoring, and DLP-style controls
• Experience selecting, configuring, and operating security tools, not just managing vendors
• Solid understanding of data protection principles, risk management, and secure system design
• Experience with security frameworks and regulatory standards relevant to sensitive-data environments (ISO 27001, GDPR, GxP, etc.)
• Hands-on experience with monitoring, logging, and incident response
• Ability to work independently with high ownership and accountability
• Comfortable operating in regulated, quality-driven, or sensitive-data environments
• Strong problem-solving, analytical, and communication skills
• Familiarity with cloud and SaaS security controls
  
  

Application Process

1

Submit Application

Complete the application form below with your details and CV

2

Initial Screening

Our HR team will review your application and contact suitable candidates

3

Technical Interview

Selected candidates will have a technical interview with the department head

4

Final Discussion

Final round with senior leadership team and offer discussion

---