Position- Manager, Global IT Security Operations

Location- Gurugram (Hybrid)

The Manager, Global IT Security Risk Management is responsible for leading the operational management and continuous improvement of Lonza's information security risk management program. This role ensures cybersecurity and technology risks are identified, assessed, documented, monitored, and managed in alignment with business objectives, regulatory requirements, and organizational risk appetite.

Reporting to the Global Head of IT Security & Compliance, the incumbent will partner with business leaders, IT teams, procurement, legal, quality, compliance, audit functions, customers, and external providers to strengthen security governance, enhance risk visibility, and drive a consistent enterprise-wide approach to cybersecurity risk management.  

Success in this role is demonstrated through improved risk governance, strengthened compliance posture, reduction of unmanaged risk exposure, and delivery of meaningful insights that enable informed business decision-making.

What you will get: 

• An agile career and dynamic working culture.
• An inclusive and ethical workplace.
• Compensation programs that recognize high performance.
• A variety of benefits dependent on role and location.

What You’ll Do

Information Security Risk Management

• Lead and continuously improve the IT security risk management program.
• Conduct risk assessments, maintain the security risk register, and drive mitigation and remediation activities.
• Provide risk-based guidance to stakeholders and support risk acceptance decisions.

Governance, Compliance & Audit

• Maintain security policies, standards, and risk management processes aligned with industry frameworks (e.g., ISO 27001, NIST).
• Support internal and external audits, compliance reviews, and remediation of findings.
• Ensure security requirements are embedded in business and technology initiatives.

Third-Party Risk Management

• Manage the global third-party cybersecurity risk program.
• Assess security risks of vendors and service providers and oversee remediation of identified gaps.
• Partner with Procurement and business stakeholders to strengthen supply chain security.

Customer Security Assurance

• Lead responses to customer security assessments, questionnaires, and due diligence requests.
• Coordinate with cross-functional teams to demonstrate compliance and security capabilities.
• Maintain customer assurance documentation and address evolving customer requirements.

Reporting & Continuous Improvement

• Develop and report key risk, compliance, and security metrics.
• Facilitate governance reviews and risk reporting for leadership.
• Drive continuous improvement of cybersecurity governance, risk, and compliance processes.

What we are looking for

• Bachelor’s degree in Information Security, Computer Science, IT, Risk Management, or a related field.
• 8+ years of experience in cybersecurity risk management, governance, compliance, audit, or information security.
• Strong understanding of security frameworks such as ISO 27001 and NIST.
• Experience managing security risk assessments, third-party risk, audits, and compliance activities.
• Knowledge of DLP, Privileged Access Management (PAM), and security governance practices is preferred.
• Professional certifications such as CISSP, CISM, CRISC, or ISO 27001 Auditor/Implementer are advantageous.
• Excellent stakeholder management, communication, and influencing skills in a global environment.
• Proven ability to drive risk-based decisions, manage competing priorities, and deliver results collaboratively.

About Lonza

At Lonza, our people are our greatest strength. With 30+ sites across five continents, our globally connected teams work together every day to manufacture the medicines of tomorrow. Our core values of Collaboration, Accountability, Excellence, Passion and Integrity reflect who we are and how we work together. Everyone’s ideas, big or small, have the potential to improve millions of lives, and that’s the kind of work we want you to be part of. Innovation thrives when people from all backgrounds bring their unique perspectives to the table.

At Lonza, we value diversity and are committed to creating an inclusive environment for all employees. If you’re ready to help turn our customers’ breakthrough ideas into viable therapies, we look forward to welcoming you on board.

Ready to shape the future of life sciences? Apply now.