This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Sapiens is looking for a Compliance Manager to join our Bangalore team. If you have expertise in quality management systems for IT services and delivery and are eager to advance your career with a globally established company, this opportunity could be the ideal fit for you. This position will be part of Sapiens CTIO division. We are seeking a highly skilled Security Compliance and Information Security Manager to ensure the organization’s compliance with all relevant security regulations, frameworks, and standards. The role is responsible for safeguarding our information systems, managing risk, and leading compliance efforts. The ideal candidate will have deep expertise in both compliance and technical security measures, ensuring a proactive approach to security threats while maintaining compliance with regulatory requirements.
Job Responsibility:
Lead the development, implementation, and management of the company’s security compliance programs (e.g., ISO 27001, SOC 2, NIST, GDPR, HIPAA)
Ensure compliance with applicable regulations and standards, including data protection laws, privacy regulations, and industry-specific guidelines
Develop and maintain documentation related to compliance policies, standards, and processes
Conduct regular security compliance audits, risk assessments, and gap analysis to identify vulnerabilities and areas for improvement
Collaborate with legal, HR, and other departments to maintain a comprehensive compliance framework
Interface with external auditors, regulators, and other third parties during compliance assessments and certifications
Provide training and awareness programs for employees to foster a culture of security and compliance
Prepare compliance reports and communicate with leadership on the status of security compliance initiatives
Develop and implement the organization’s information security strategy, policies, and procedures to protect critical systems and data
Monitor and assess security risks, threats, and vulnerabilities across all information systems, networks, and applications
Lead incident response efforts, including forensic analysis, investigation, and reporting of security breaches or incidents
Implement security technologies such as firewalls, intrusion detection systems (IDS), data loss prevention (DLP), and endpoint protection tools
Manage identity and access management (IAM) systems, ensuring that access controls and user privileges are appropriately defined and enforced
Oversee the security of cloud infrastructure (AWS, Azure, GCP), including configuration reviews, security assessments, and monitoring
Conduct regular security testing, including vulnerability scans and penetration testing, to validate the security posture of systems
Work closely with DevOps and engineering teams to integrate security practices into development and operational processes (DevSecOps)
Ensure the organization complies with secure coding standards and best practices in application development
Stay current on the latest security trends, vulnerabilities, and technologies, and recommend upgrades to security infrastructure as necessary
Requirements:
Bachelor’s degree in information security, Computer Science, or a related field
12+ years of experience in information security, risk management, or security compliance
In-depth knowledge of information security principles, including network security, application security, encryption, identity management, and incident response
Familiarity with security tools and technologies, including firewalls, IDS/IPS, DLP, SIEM, endpoint security, and vulnerability management
Experience with cloud security in platforms like AWS, Azure, or GCP
Strong understanding of data privacy regulations (GDPR, CCPA) and their impact on security compliance
Strong leadership skills and experience managing cross-functional teams or security operations
Excellent analytical and problem-solving skills, with a proactive approach to identifying and mitigating risks
Certifications such as CISSP, CISM, CISA, or CRISC are highly desirable
Nice to have:
Master’s degree in information security, Cybersecurity, or related field
Hands-on experience with security automation and orchestration in a DevSecOps environment
Experience working with security frameworks for regulated industries (e.g., healthcare, finance)
Familiarity with advanced threat detection and mitigation strategies