Deputy Manager - Information Security

POSITION: Deputy Manager - Information Security Reports to (Position): VP/AVO Information Security Business Unit: Invesco Asset Management India Location: Mumbai Principal Accountabilities: Develop, implement, and maintain the GRC framework for information security. Conduct regular audits to assess the effectiveness of security controls and compliance with regulations and internal policies. Collaborate with internal stakeholders to identify and mitigate information security risks. Ensure compliance with relevant regulatory requirements, laws: including data protection laws and industry standards. Prepare detailed audit reports and present findings to senior management, along with remediation recommendations. Monitor changes in regulations and industry standards to ensure ongoing compliance. Facilitate training and awareness programs for employees on security policies and regulatory requirements. Work closely with IT and other departments to ensure integration of security controls into business processes. Knowledge, Skills, Competencies, and Certifications: Strong understanding of Information security and control frameworks (e.g., ISO 27001/27002, COBIT, NIST). Knowledge of regulatory requirements specific to the financial services sector, including SEBI, DPDPA, etc. Excellent analytical skills and attention to detail for conducting audits and assessments. Strong communication and interpersonal skills to effectively convey compliance requirements. Ability to work independently and collaboratively in a cross-functional environment. Proficiency in GRC tools and audit methodologies.

• Seniority: Mid Level
• Languages: English