Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 days ago

IT Security Team Lead

Creative Capsule12 open roles

Where
Goa, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security Team LeadCreative Capsule · Goa, India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Creative Capsule's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.0% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 8.0%7 days
  4. 15.0%14 days
  5. 34.2%30 days
This job: posted 4 days ago

The posting

This position is responsible for managing the day-to-day delivery of information security activities across client projects, internal operations, compliance support and team management. The candidate will provide practical technical leadership to ensure that identified security risks, incidents, vulnerabilities and assigned control activities are assessed, communicated and addressed in a timely and proportionate manner. The role will lead and mentor the IT Security team, coordinate security work with clients and internal stakeholders, and support the operation and continual improvement of the company’s security controls and compliance programme. This person will report to the Head of Information Security and Compliance / Director of IT Services.

The person in this position will work regularly with clients, Development, QA, DevOps, Cloud, IT Systems and other business teams. The candidate will translate security and compliance priorities into team plans, coordinate delivery, monitor progress, escalate material risks and ensure that assigned security work is completed with appropriate evidence, quality and follow-through.

Responsibilities:

  • Translate the information security and compliance strategy into operational plans, team priorities and measurable improvement activities
  • Manage day-to-day security operations across endpoints, networks, cloud environments and applications, including monitoring, incident response, vulnerability management, hardening and remediation
  • Coordinate assigned compliance activities, including risk assessments, policy implementation, control operation, evidence collection, audit support and corrective-action tracking
  • Guide application, infrastructure and cloud security through assessments, penetration testing, threat modelling, secure architecture reviews and practical DevSecOps improvements
  • Perform and coordinate third-party, vendor, SaaS and subprocessor security assessments, escalating material risks and recommended safeguards
  • Implement and monitor approved AI governance and security requirements, including AI tool assessments, data-use safeguards, access controls, supplier reviews, exception tracking and escalation of material AI risks or incidents
  • Coordinate client security requests, due diligence, audits and agreed security work, ensuring clear scope, responsibilities, deliverables and follow-through
  • Lead, coach and develop the IT Security team, managing priorities, capacity, quality, knowledge sharing and succession readiness
  • Maintain operational security metrics covering incidents, vulnerabilities, control activities and remediation progress, and provide accurate inputs for management reporting
  • Provide timely risk updates, operational insights and recommendations to the Director of IT Services / Head of Information Security and Compliance and relevant stakeholders
  • Promote practical security awareness, accountability and continuous improvement across technical and business teams
  • Support interviews, onboarding, documentation and knowledge-sharing activities related to information security roles or responsibilities, when required
  • Continue to upskill in emerging information security, compliance, cloud, AI governance and secure development practices to meet changing business and client requirements

Technical Skills:

  • Experience across information security governance, security operations, risk management, incident response, vulnerability management, application security, cloud security or infrastructure security
  • Practical experience operating or materially supporting an information security and compliance programme after implementation or certification
  • Experience coordinating audits, assessments, evidence collection, remediation tracking and continual improvement activities
  • Experience engaging clients or external stakeholders on security requirements, assessments, findings and risk-based recommendations
  • Proficient in interpreting ISO 27001:2022 requirements and applying applicable legal, regulatory, contractual, industry and client security requirements
  • Proficient in using or overseeing SIEM, EDR, vulnerability scanning and application security testing tools. Exposure to Wazuh, Nessus, Burp Suite, Kali Linux or comparable tools is valuable
  • Proficient in interpreting technical findings and converting them into prioritised, practical actions for business and technical teams
  • Proficient in defining and managing security metrics, dashboards, plans, dependencies, deadlines and stakeholder expectations
  • Proficient in balancing security, compliance, delivery, usability, cost and business risk rather than applying controls mechanically
  • Good understanding of secure software development, threat modelling, cloud security and infrastructure security principles
  • Knowledge of AWS, Azure and/or GCP security practices
  • Knowledge of AI governance and security risks, including approved-use controls, data protection, access management, third-party AI services, secure AI-assisted development, monitoring and incident escalation

Personal Skills:

  • Ability to lead from the front while remaining comfortable with practical technical involvement when required
  • Ability to manage, mentor and motivate IT Security Engineers and establish clear ownership and accountability
  • Ability to remain calm, structured and professional during incidents, difficult client discussions and competing priorities
  • Ability to analyse complex situations, solve problems and recommend proportionate solutions
  • Ability to communicate clearly and accurately with leadership, clients, auditors and technical teams
  • Ability to challenge constructively and influence stakeholders without relying solely on authority
  • Ability to priorities short-term operational needs and long-term security improvement objectives under changing circumstances
  • Ability to demonstrate integrity, discretion and sound judgement when handling confidential or sensitive information

Education and Work Experience:

  • Bachelor’s degree in computer science, Information Technology, Cybersecurity or a related discipline, or equivalent relevant experience
  • ISO/IEC 27001 Lead Implementer or Lead Auditor certification is preferred
  • A relevant security certification such as CISSP, CISM, CRISC, CCSP, OSCP or an equivalent is preferred
  • 8 to 12 years of information security experience, or an equivalent combination of relevant education and practical experience
  • At least 3 years of experience leading security professionals, security workstreams or a security function
  • Experience in a SaaS or technology services organisation supporting clients in regulated or data-sensitive sectors is preferred
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Creative Capsule's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Creative Capsule's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Creative Capsule's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.