Cyber Security - Manager

Aqilea is an IT and engineering consulting partner that helps companies get more out of their technology and operations. With teams in Stockholm and Bangalore, we work closely with our clients to build solutions that fit their needs - from software development, AI and infrastructure engineering to industrial automation and embedded systems.

We combine strong technical expertise with a practical, business-focused approach to help organizations modernize, improve security, and scale with confidence. Above all, we focus on long-term partnerships built on trust, quality, and real results.

With us, you have great opportunities to take real steps in your career and the opportunity to take great responsibility.

About the Role

Company: Aqilea India

Role: Cyber Security Manager

Experience: 9+ Years

Location: Bangalore (Hybrid)

Job Summary

We are looking for a Cyber Security Manager professional to lead and strengthen Software Security across a retail organization. This role focuses on building secure software development practices, enabling development teams with the right tools and guidance, and ensuring security is built into applications from design to deployment.

You will work as part of a central Software Security team, defining standards, security patterns, and automated guardrails that help teams deliver software safely and quickly.

Key Responsibilities

Central Software Security Team Lead role owning the group-wide Software Security capability, defining the target state/maturity and scaling secure software development across organization aligned to OWASP, NIST SSDF, and ISO/IEC 27034.

• Lead: capability ownership (scope, objectives, maturity model, roadmap) and architectural alignment; central team (not embedded in squads) enabling product teams via guidance, guardrails, tooling, and automation
• SSDLC focus / controls: secure design patterns + reference architectures; SSDLC guardrails mapped to OWASP/SAMM/ASVS (and MASVS), NIST SSDF, ISO/IEC 27034; threat modelling/abuse cases; risk-based triage and acceptance criteria
• Experience needed: deep SSDLC and secure architecture background with practical experience across software security testing/tooling (SAST/DAST/SCA etc.) and ability to translate standards into usable controls and paved roads
• Expectations: Lead the work and drive alignment with stakeholder, prioritise backlog, manage stakeholders, represent in governance forums, drive continuous uplift across domains (web/mobile/APIs/cloud-native), track KPIs (coverage, time-to-fix, false positives, adoption) and improve developer experience
• AI alignment: define secure-by-default patterns for AI-assisted development and AI-enabled applications (guardrails for assistants, governance for AI-generated code, and secure design for LLM features)

Certification: CISSP (Mandatory)

Leadership & Collaboration (for Lead role)

• Own the software security roadmap and capability maturity.
• Work closely with engineering, platform, and leadership teams.
• Mentor engineers and promote a strong security culture.

Required Skills & Experience

• Lead the Software Security capability strategy and maturity roadmap
• Lead stakeholder engagement and represent software security in architecture and governance forums
• Lead adoption of secure development practices, including AI‑assisted development, across engineering
• Aligns the capability to industry standards such as ISO/IEC 27034, NIST SSDF, and OWASP

Start: Immediate to 15 Days

Location: Bangalore (Hybrid)