Job Description

• Gurugram, Haryana, India

Job Summary:

We are seeking a highly motivated Information Security & Compliance Manager to join our dynamic team at VMock. You will leverage your technical expertise and communication skills to ensure our information security program meets or exceeds industry regulations and standards while directly addressing client concerns and requirements. You will be a key liaison between VMock and our clients, ensuring their trust and satisfaction with our security and compliance posture.

Key Responsibilities:

• Develop, implement, and maintain VMock's information security compliance program, aligning with GDPR, CCPA, TXRAMP, SOC2, ISO 27001, and other relevant frameworks.
• Direct and oversee the assessment, selection, implementation, and maintenance of information security tools and technologies.
• Maintain accurate and up-to-date records related to data privacy activities, including policies, procedures, assessments, and incident reports.
• Prepare reports and presentations on security risk, compliance status, and program effectiveness.
• Conduct regular security assessments, risk mitigation, and incident response, including reporting to relevant authorities when necessary.
• Maintain up-to-date knowledge of industry regulations and best practices, adapting our program as needed.
• Collaborate with cross-functional teams to ensure that security is incorporated into all aspects of the business. Evaluate and manage data privacy risks associated with third-party vendors and partners, including conducting privacy assessments and due diligence.
• Train employees and stakeholders on security best practices. Develop and deliver data privacy training programs, promoting a culture of privacy awareness and responsibility.

Client Communication & Support:

• Serve as the primary point of contact for external facing teams regarding security and compliance inquiries and questionnaires.
• Provide clear, concise explanations of VMock's security measures and respond to client-specific questions.
• Assist Sales and Client Success teams with technical and compliance issues during client onboarding.
• Create and deliver training materials and presentations to educate clients and internal teams on security and compliance topics.
• Analyse client requirements and recommend policy or process adjustments within VMock.
• Troubleshoot client issues, translating their needs into actionable tasks for relevant internal teams.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree is a plus).
• Professional certification in information security or compliance (CISSP, CISM, CISP, or ISO 27001 Lead Implementer highly preferred).
• 3-5 years of experience as a client-facing analyst in the information security domain.
• Excellent written and verbal communication skills, with the ability to explain technical concepts clearly to non-technical audiences.
• Strong understanding of regulatory frameworks (GDPR, CCPA, etc.), with the ability to translate the intricacies and requirements of these regulations into actionable tasks and controls for the security team
• Experience with security assessments, incident response, and risk mitigation.
• Proven ability to collaborate effectively with cross-functional teams and external stakeholders.
• Technical background, either through formal education or relevant experience as a business analyst in information security.