OneXtel
Website:
onextel.com
Job details:
We’re Hiring | Associate Director / Director – Information Security & Client Assurance
📍 Location: Noida / Pune
🏢 Division: Office of the CISO
💼 Experience: 10+ years in Information Security, including 4+ years in GRC, Compliance, Audit or Client Assurance
About the Role:
OneXtel is looking for a seasoned security leader to own and strengthen our Information Security, Governance, Risk & Compliance (GRC), and Client Assurance functions.
In this strategic leadership role, you will be responsible for securing OneXtel’s internal ecosystem while building client confidence through robust security controls, regulatory compliance, certifications, and transparent assurance practices.
As a trusted partner to the CISO, Engineering, Legal, Sales, and leadership teams, you will help ensure that our security commitments are not just documented but consistently implemented, evidenced, and delivered.
🔑 Key Responsibilities
✅ Information Security & Risk Management
- Own the Information Security Management System (ISMS), security policies, risk assessments, and control frameworks.
- Drive security across cloud, on-premises infrastructure, data centres, IAM, encryption, vulnerability management, logging, and secure SDLC.
- Strengthen incident response, business continuity, disaster recovery, and security awareness programmes.
✅ Certifications, Audits & Regulatory Compliance
- Lead ISO 27001, ISO 27701, SOC 2 Type II, and other relevant certification and assurance programmes.
- Manage internal and external audits, evidence collection, remediation, and continuous control monitoring.
- Drive compliance with applicable data protection regulations, including India's DPDP framework, GDPR, and GCC privacy laws.
✅ Enterprise Client Assurance
- Own security questionnaires, RFP responses, vendor risk assessments, and client security audits.
- Build and maintain client assurance packs, trust portals, and reusable compliance evidence.
- Partner with Legal and Sales to review and negotiate security, privacy, and compliance clauses in MSAs, DPAs, and SLAs.
- Support strategic BFSI, government, fintech, and other regulated enterprise clients in meeting their vendor security requirements.
✅ Leadership & Stakeholder Management
- Report security posture, risks, audit findings, and compliance metrics to the CISO and senior leadership.
- Build and lead a high-performing GRC and Client Assurance team.
- Collaborate with Engineering, Infrastructure, Product, Legal, and Sales to embed security into business operations and accelerate enterprise deal closures.
🎯 What We’re Looking For
- 10+ years of experience in Information Security, with at least 4 years in GRC, compliance, audit, or client assurance leadership.
- End-to-end ownership of ISO 27001 certification and at least one SOC 2 Type II or PCI DSS audit cycle.
- Practical knowledge of data protection laws across at least two regions, such as India, the EU, or the GCC.
- Proven experience supporting enterprise security assessments and audits, preferably for BFSI or government clients.
- Strong understanding of security architecture, cloud and on-prem infrastructure, IAM, encryption, monitoring, and secure SDLC.
- Experience reviewing and negotiating security and privacy clauses in commercial contracts.
- Excellent communication and stakeholder management skills, including engagement with auditors, client CISOs, and executive leadership.
🏅 Preferred Certifications
- CISSP / CISM / CISA
- ISO 27001 Lead Auditor or Lead Implementer
- CIPP/E / CIPP/A / CIPM or DPO certification
- CCSP / CCSK
⭐ Good to Have
- Experience with Big Four or leading cybersecurity consulting firms.
- Telecom, CPaaS, CCaaS, or messaging industry experience, including TRAI/DLT, SMPP, and operator security requirements.
- Bachelor's degree in Computer Science, Engineering, or a related field; a Master's degree or MBA is an advantage.
Why This Role Matters
At OneXtel, security and compliance are more than audit requirements — they are essential to earning and maintaining the trust of enterprise customers across industries and regions.
If you are passionate about building scalable security programmes, enabling regulatory confidence, and turning security assurance into a business advantage, we would love to hear from you!
Click on Apply to know more.
