Information Security Manager

Job Description

Role : Information Security Manager

Base location : Bangalore, Chennai, Mumbai, Pune & Hyderabad

Key Responsibilities :

Security Architecture Review & Threat Modeling :

• Conduct  security architecture reviews  for applications, cloud environments, and IT systems to identify risks.
• Perform  threat modeling (e.g., STRIDE, PASTA, MITRE ATT&CK, DREAD)  to assess potential attack vectors and weaknesses.
• Analyze  authentication, encryption, and access control mechanisms  within application and system architectures.
• Review security controls against industry standards and organizational policies (e.g.,  NIST, ISO 27001, OWASP, CIS Controls, TISAX ).
• Provide  secure design recommendations  to mitigate identified risks.

Application & Cloud Security Assessment :

Security Risk & Compliance Evaluation :

Collaboration & Reporting :

Requirements

Qualifications & Experience :

Preferred Certifications :

Requirements

Qualifications & Experience : Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field. 3+ years of experience in security architecture review, threat modeling, and risk assessment. Strong expertise in threat modeling frameworks such as STRIDE, PASTA, MITRE ATT&CK, OWASP ASVS. Knowledge of cloud security (AWS, Azure, GCP), API security, and microservices architecture. Familiarity with IAM, Zero Trust, MFA, RBAC, PAM, and network security principles. Experience in secure SDLC, DevSecOps, and security assessment. Hands-on experience with security assessment tools (e.g., Microsoft Threat modeling, Microsoft Visio). Understanding of penetration testing methodologies, security misconfigurations, and application security risks. Preferred Certifications : CISSP (Certified Information Systems Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) CCSP (Certified Cloud Security Professional) AWS / Azure Security Certifications CEH (Certified Ethical Hacker) or OSCP (Offensive Security Certified Professional)