Information Security Manager

About the role

As an Information Security Manager at ICICI Bank, you will lead the organization’s information security program, ensuring the confidentiality, integrity, and availability of data, systems, and networks. You will develop and maintain security policies, oversee compliance, and respond to emerging cyber threats while collaborating with technical teams, business leaders, and external partners.

Key responsibilities

• Develop, implement and regularly update information security policies, procedures and guidelines aligned with business objectives and regulatory requirements.
• Conduct risk assessments and vulnerability analyses, monitor emerging threats and recommend enhancements to the security program.
• Lead investigation and response to security incidents, ensuring effective containment, analysis and communication.
• Ensure compliance with laws and standards such as GDPR, PCI DSS and ISO 27001, coordinate audits and manage remediation.
• Oversee deployment, configuration, maintenance and monitoring of security tools including firewalls, encryption solutions, intrusion detection systems and access controls.
• Collaborate with other departments to embed security into business processes and projects, and communicate risk posture to senior management.
• Manage third‑party vendor security assessments and ensure adherence to organizational security standards.
• Produce detailed reports on security status, audit findings, incidents and compliance for governance bodies.

Required profile

• Engineering graduate in Computer Science, Information Technology, Electronics, Information Security, Cyber Security or equivalent (e.g., MCA).
• Relevant professional certifications (e.g., CISSP, CISM, ISO 27001) as specified by the employer.

Required skills

• Security policy development and management.
• Risk assessment and vulnerability analysis.
• Incident response and investigation.
• Compliance with GDPR, PCI DSS, ISO 27001.
• Firewalls, encryption solutions, intrusion detection systems, access control mechanisms.
• Vendor security assessment.