Senior Security Governance
Bridgestone · Automotive
- Bengaluru, India
- On-site
- Posted today
About the job
Experience: 8+ Years
About Information Security Team
Our mission is to create and maintain a secure foundation for Bridgestone to continue serving society with superior quality and trust in a digital and evolving world. We will Identify, Detect, Protect, Respond and Recover from cyber-attacks, ensuring the Confidentiality, Integrity, Availability and Safety of our team-mates, information, and systems.
Years of Experience : 8 Years
Key Responsibilities:
Support the definition and execution of Information Security Governance & Compliance strategy, including roadmap development, technology enablement, vendor support, and program maturity initiatives.
Lead and coordinate day-to-day governance activities.
Develop, maintain, and improve security policies, standards, procedures, and control libraries.
Support compliance assessments, audits, and governance reviews across regulatory and industry frameworks.
Produce reporting, metrics, and executive presentations for leadership.
Support implementation and continuous improvement of governance, risk, and compliance platforms and security controls.
Foster strong relationships with business and IT stakeholders to embed security and compliance requirements into operational processes.
Technical Skills :
Strong understanding of Information Security Governance, Risk, and Compliance (GRC) principles and practices.
Experience with security frameworks and regulations, including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, PCI-DSS, GDPR, SOX, and GLBA.
Experience developing and maintaining policies, standards, procedures, controls, and compliance documentation
Soft Skills :
Strong verbal and written communication and interpersonal skills. (in English)
Excellent troubleshooting and problem-solving skills
Solid business acumen; understands how Information Security supports business objectives.
Comfortable dealing with ambiguity and working through change.
Works well on a team; supplemented by the ability to work with minimal supervision.
Educations and Qualifications:
Bachelor's degree in information technology, Computer Science, or a related field.
Preferred certifications: CISSP, CISM, CISA, CIPP, CRISC, CGEIT, GRCP, Security+, or equivalent governance, risk, and compliance certifications.