About this role
The Lead Information Security Officer is a senior Information Security practitioner and people leader responsible for directing the day-to-day work and development of the global Information Security team. Based in the Pune GCC centre and reporting to the Group Head of Cyber, the role will retain the core governance, risk, compliance, awareness and advisory responsibilities of the Group Information Security Officer while providing clear leadership, prioritisation, quality oversight and escalation support for the wider team. The role will help the business achieve its objectives safely through appropriate and proportionate controls, policies, standards and risk management practices, supported by clear executive and Board-level reporting.
Provide line management, coaching, objective setting, performance support and professional development for the whole Information Security team, including colleagues working across locations and time zones. Plan, prioritise and allocate team activity, monitor delivery against agreed objectives and ensure consistent quality, service and governance standards. Act as the primary escalation point for Information Security risks, issues and incidents, escalating material matters to the Group Head of Cyber and supporting out-of-hours response where required.
Lead the development, review and implementation of Information Security governance processes, policies, standards and control requirements in response to business change, emerging threats, legislation and regulation. Lead the Information Security risk management approach, ensuring risks are identified, assessed, recorded, treated, monitored and reported across the Group. Lead complex information security and third-party risk assessments, balancing technical, physical, procedural and people controls with business needs and risk appetite Lead the production of Information Security requirements for suppliers, business initiatives and compliance activities, working with the wider Governance, Risk and Compliance function to ensure risks are appropriately managed.
Lead the Information Security training and awareness programme, ensuring colleagues understand their security responsibilities and how their work supports organisational objectives. Provide pragmatic Information Security advice and challenge to senior stakeholders, programmes, projects and operational teams, enabling secure business decisions. Own the production and quality assurance of monthly Information Security risk dashboards, KPI and KRI reporting, and executive and Board-level updates. Support internal and external audits, regulatory reviews and customer assurance activities, ensuring evidence, remediation actions and responses are complete, accurate and timely.
Support security incident response, lessons learned and control improvement activities, coordinating Information Security input with Cyber Security, Privacy, Data Governance, Technology and business teams. Promote effective collaboration across Cyber Security, Information Assurance, Privacy, Data Governance and the wider GRC function to maintain a cohesive approach to security risk management. Deputise for the Group Head of Cyber on Information Security matters where required.