Assistant Manager, InfoSec & GRC

* Drive daily cybersecurity operations, ensuring seamless execution and adherence to global compliance standards. * Lead the InfoSec & GRC team, providing guidance and support to ensure tasks are completed within defined SLAs and security incidents are promptly addressed. * Architect and implement robust security controls, managing risk assessments and aligning defensive postures with organizational policies. * Develop and track key performance indicators (KPIs) for the department, presenting security metrics and insights to senior leadership. * Champion the implementation of GRC frameworks, including ISO 27001, SOC 2, CMMI, and ISO 9001, to ensure audit readiness and compliance. * Conduct thorough business impact analyses and support the development of disaster recovery and business continuity plans. * Design and deliver cybersecurity awareness training programs to educate internal stakeholders. * Manage the performance and health of security tools, including XDR, SIEM, IAM, and DLP, to ensure optimal functionality. * Oversee vulnerability management programs, collaborating with IT teams to ensure timely patching and hardening. * Optimize next-gen firewall rules and secure web routing protocols to prevent security breaches. * Spearhead initial incident response investigations, performing root cause analyses to identify areas for improvement. * Foster a culture of compliance, ensuring adherence to regulatory requirements and industry standards, including Bangladesh-specific data privacy regulations.