Global Leader - Information Security

BrightClaim•New York, NY

8d•$200,000 - $290,000•Hybrid

About The Position

Genpact is seeking a Global Leader - Information Security to lead and mature global cybersecurity capabilities and governance. The role oversees the Cyber Defense Centre strategy and operating model, information security risk and issue management, third-party risk management, security for mergers and acquisitions, security of Agentic AI solutions, and enterprise identity security. It partners with technology, business, procurement, legal, and Data Tech AI teams to embed security into operations and solutions, respond to emerging threats, and align cybersecurity with business priorities and regulatory requirements. This is a hybrid role with a flexible work shift in the United States. The approximate annual base compensation range is $200,000 to $290,000. Los Angeles, California-based candidates are not eligible. The role requires proficient English (C2).

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or Information Technology, or a master’s degree in Computer Science.
English proficiency at C2 level.
Skills listed: Application Security, Cloud Security, Cyber Resilience Management, Cybersecurity, Cyber Threat Intelligence, Data Protection, Data Security, Digital Certificates, Endpoint Security, Forensics, Identity Access Management (IAM), Incident Management, Information Security, Information Security Risk Management, Open Web Application Security Project (OWASP), Risk Management, Security Architecture Design, Security Awareness, Security Consulting, Security Framework, Security Information and Event Management (SIEM), Security Operations Management, Security Policies, and Security Standards.

Nice To Haves

Certifications listed: BUILD- IT/CISM, Certified Information Systems Security Professional (CISSP), and CISA.

Responsibilities

Lead and mature the global Cyber Defense strategy, capabilities, and operating model.
Drive continuous improvement in threat detection, alert triage and response, and digital forensics.
Establish, monitor, and improve metrics for security alert detection and response.
Support cyber crisis management and coordination during major security incidents.
Align Cyber Defense Centre operations with emerging threats, business priorities, and regulatory requirements.
Drive security automation, orchestration, and AI-enhanced response capabilities.
Lead the information security risk management framework and governance processes.
Establish risk appetite, risk assessment methodologies, and risk reporting mechanisms.
Lead enterprise-wide security issue management, governance, and remediation.
Drive accountability across technology and business teams for timely issue mitigation.
Present risk insights and recommendations to executive leadership.
Integrate cybersecurity risk into enterprise risk management processes.
Establish and maintain a comprehensive Third-Party Risk Management program.
Define security due diligence standards for vendors and partners.
Oversee third-party security assessments, continuous monitoring, and remediation.
Collaborate with procurement, legal, and business stakeholders to incorporate information security requirements into sourcing and contracting.
Lead information security due diligence and integration activities for mergers, acquisitions, and divestitures.
Evaluate target organizations’ information security posture, maturity, and risks.
Develop integration and separation security strategies.
Maintain security oversight and governance of acquired entities’ infrastructure and products.
Develop and lead the security strategy for Data Tech AI solutions, including Agentic Solutions.
Establish security controls for Agentic solutions deployment, monitoring, and lifecycle management.
Partner with Data Tech AI teams to embed secure-by-design principles into Agentic solutions.
Lead enterprise Identity Security strategy and governance.
Implement Zero Trust security principles across identity ecosystems.
Drive secure authentication, authorization, access reviews, and privileged account governance.