Manager, Global IT Security Operations

Position- Manager, Global IT Security Operations Location- Gurugram (Hybrid) The Manager, Global IT Security Risk Management is responsible for leading the operational management and continuous improvement of Lonza's information security risk management program. This role ensures cybersecurity and technology risks are identified, assessed, documented, monitored, and managed in alignment with business objectives, regulatory requirements, and organizational risk appetite. Reporting to the Global Head of IT Security & Compliance, the incumbent will partner with business leaders, IT teams, procurement, legal, quality, compliance, audit functions, customers, and external providers to strengthen security governance, enhance risk visibility, and drive a consistent enterprise-wide approach to cybersecurity risk management.   Success in this role is demonstrated through improved risk governance, strengthened compliance posture, reduction of unmanaged risk exposure, and delivery of meaningful insights that enable informed business decision-making. What you will get:  An agile career and dynamic working culture. An inclusive and ethical workplace. Compensation programs that recognize high performance. A variety of benefits dependent on role and location. What You’ll Do Information Security Risk Management Lead and continuously improve the IT security risk management program. Conduct risk assessments, maintain the security risk register, and drive mitigation and remediation activities. Provide risk-based guidance to stakeholders and support risk acceptance decisions. Governance, Compliance & Audit Maintain security policies, standards, and risk management processes aligned with industry frameworks (e.g., ISO 27001, NIST). Support internal and external audits, compliance reviews, and remediation of findings. Ensure security requirements are embedded in business and technology initiatives. Third-Party Risk Management Manage the global third-party cybersecurity risk program. Assess security risks of vendors and service providers and oversee remediation of identified gaps. Partner with Procurement and business stakeholders to strengthen supply chain security. Customer Security Assurance Lead responses to customer security assessments, questionnaires, and due diligence requests. Coordinate with cross-functional teams to demonstrate compliance and security capabilities. Maintain customer assurance documentation and address evolving customer requirements. Reporting & Continuous Improvement Develop and report key risk, compliance, and security metrics. Facilitate governance reviews and risk reporting for leadership. Drive continuous improvement of cybersecurity governance, risk, and compliance processes. What we are looking for Bachelor’s degree in Information Security, Computer Science, IT, Risk Management, or a related field. 8+ years of experience in cybersecurity risk management, governance, compliance, audit, or information security.