Associate Principal - Information Security

The Associate Principal - Information Security will lead enterprise security governance, risk and compliance programs, including audits, cloud security and customer assurance. You will act as a trusted advisor to senior leadership, clients and vendors, ensuring the organisation's security posture meets international standards. This is a Work From Office role based in Bengaluru.

A leading global consulting firm delivering data, analytics and AI-driven solutions to enterprises worldwide. The organisation is known for its fast-paced, research-led culture and its commitment to building trust with clients through robust security and compliance practices.

Responsibilities

• Lead enterprise information security governance, risk management and compliance programs across the organisation.
• Own and drive ISO 27001, SOC 2 and GDPR certification, audit and compliance activities.
• Oversee cloud security architecture, controls and incident response processes.
• Manage customer and vendor security assessments, questionnaires and assurance reviews.
• Define and maintain security policies, standards and risk frameworks aligned with industry best practices.
• Partner with senior business and technology stakeholders to drive security awareness and risk-based decision making.
• Lead, mentor and develop security teams, setting direction and priorities.
• Represent the organisation in client, audit and regulatory interactions on security matters.

Requirements

• 12-15 years of experience in Information Security, with significant exposure to governance, risk and compliance.
• Strong hands-on expertise in ISO 27001, SOC 2 and GDPR.
• Proven experience in Security Governance & Risk Management.
• Solid knowledge of Cloud Security and Incident Response.
• Experience conducting customer and vendor security assessments.
• Strong stakeholder management and leadership capabilities.
• Preferred certifications: CISSP, CISM, CRISC or ISO 27001 Lead Auditor/Implementer.

Skills

ISO 27001, SOC 2, GDPR, Security Governance & Risk Management, Cloud Security & Incident Response, Customer & Vendor Security Assessments, Stakeholder Management & Leadership, CISSP, CISM, CRISC, ISO 27001 Lead Auditor/Implementer