Assistant Manager - Information Security and Risk Compliance

Assistant Manager

We are seeking a professional with experience in Information Security, Cyber Security, Risk Management, and Compliance to support governance, operational risk oversight, security audits, and investigation activities. The role will work closely with cross-functional teams to ensure adherence to organizational security standards, regulatory requirements, and risk management practices.

Support implementation and monitoring of Information Security and Cyber Security controls across business and technology environments.

Conduct compliance assessments, operational risk reviews, and security governance activities.

Assist in internal/external audits, investigations, and remediation tracking.

Review security risks associated with applications, vendors, infrastructure, and business processes.

Ensure compliance with organizational policies, regulatory requirements, and industry standards.

Coordinate with Legal, Risk, Compliance, and Technology teams on security and governance matters.

Support incident management, investigation activities, and litigation/eDiscovery requirements where applicable.

Prepare risk reports, security documentation, and management updates.

Knowledge of Information Security, Cyber Security, Risk Management, and Compliance frameworks.

Understanding of security governance, audit processes, and operational risk management.

Familiarity with ISO 27001, SOC, NIST, GDPR, or similar compliance standards.

Strong analytical, communication, and stakeholder management skills.

Experience in security assessments, compliance reviews, or audit coordination preferred.

Preferred Qualifications:

Bachelor’s degree in Information Security, Computer Science, Risk Management, or related field.

Certifications such as CISA, CISM, ISO 27001 Lead Auditor/Implementer, or CISSP are preferred.

Experience Level

Mid Level