Senior Manager - Information Security
First seen by Alion on Sep 30, 2026.
Information Security Manager
Role Summary:
The Information Security Manager will serve as the subject-matter expert for cybersecurity protection, detection, response, and recovery. This role is accountable for guiding the design, implementation, and continuous improvement of an enterprise-wide security framework.
Key Responsibilities:
- Serve as the primary point of contact between the internal information security team, external security partners, and customers.
- Manage internal and external security team members, including third-party security service providers.
- Guide the IT function and business units in developing and maintaining a comprehensive enterprise security framework.
- Lead the development of baseline infrastructure and application hardening guides based on industry best practices.
- Assess business processes, technology, and IT architecture to evaluate risk posture and determine appropriate security models.
- Lead the design, implementation, and maintenance of an ISO 27001, PCI-DSS, DPDP, and GDPR compliant security framework.
- Own and maintain security systems and controls, including firewalls, DLP, patch management, encryption, and vulnerability scanning.
- Ensure round-the-clock monitoring of all security operations and infrastructure.
- Develop and maintain a detailed Security Incident Response Program.
- Design and deliver information security awareness training programs.
Qualifications & Skills:
- Bachelor's degree in Information Technology, Computer Science, or an equivalent discipline.
- Strong technical knowledge of applications, systems, network, and infrastructure.
- Working knowledge of cloud security across AWS, GCP, and Azure.
- Hands-on proficiency with EDR, DLP, Anti-Virus, Vulnerability Management, and SIEM platforms.
- Demonstrated expertise in developing and executing Incident Response Playbooks.
- Hands-on exposure to Information Security Management Systems such as ISO 27001, NIST CSF, and NCIIPC guidelines is mandatory.
- Excellent communication skills, with the ability to coordinate effectively across diverse stakeholders.
Experience:
- 12 to 14 years of relevant experience in information security or cybersecurity roles.
Skills
Information Security, IT Risk Management, IT Compliance, Cyber Security, CISM