Information Security Manager

ABOUT REVANTAGE

Revantage, a Blackstone Real Estate portfolio company, is a global provider of corporate services.

With a corporate purpose of ‘In Pursuit of Better,’ Revantage delivers value-added services and world-class talent for Blackstone Real Estate portfolio companies, spanning diverse asset classes, including residential, logistics, office, hospitality and retail sectors. The company’s footprint extends across North America, Europe and Asia Pacific.

Creating a culture that inspires impact and momentum requires the right team. We know what it takes to lead an industry, and are looking for leaders who seek constant growth, want to excel, and continuously improve upon themselves and the industry.

In addition to supporting Revantage, we also recruit for Blackstone Real Estate portfolio companies, giving you the unique opportunity to work within a network of best-in-class professionals across a broad real estate platform. 

India

With offices in Bengaluru and Gurugram, our teams in India deliver expertise, innovation and operational excellence that support thousands of assets across logistics, data centers, residential, commercial and hospitality.

Whether you’re building new capabilities, driving critical initiatives or strengthening partnerships, you’ll have the opportunity to truly Build What Matters.

ROLE SUMMARY

We are seeking an Information Security Manager for , a Blackstone Real Estate portfolio company and the largest owner, manager and developer of high-quality student housing communities in the United States. This role is based in Bengaluru, India, hired through Revantage India and reports to Chief Information Security Officer (CISO). The manager leads the India-based Application Development Security Engineer, Information Security Engineer, Information Security Analyst and Identity and Access Management Analyst, converting security priorities into disciplined execution, measurable service performance and timely risk reduction.

This is a hands-on leadership role requiring technical credibility, sound judgment, strong business communication and the ability to lead effectively across cultures and time zones. Working hours will provide meaningful overlap with US Central Time, with rotating on-call coverage for US nights and weekends and coverage on US and India holidays to support uninterrupted operations.

PRIMARY ROLE

Lead, coach and develop the four-person India information-security team; establish clear objectives, priorities, accountability and performance expectations.

Plan and balance work across application security, security engineering, security monitoring and response, vulnerability management, and identity and access management.

Serve as the primary India-based escalation point for security incidents, operational issues, access risks, critical vulnerabilities and production-impacting events.

Translate direction from the CISO into operating plans, procedures, service levels, work assignments, metrics and evidence of control performance.

Coordinate closely with US-based Information Security, IT Operations, Infrastructure, Cloud, Networking, Application Development, Legal, Risk, Internal Audit and business teams.

Maintain effective daily operations, including queue management, alert and incident triage, vulnerability remediation, access requests, control monitoring and stakeholder communication.

Ensure security is integrated throughout the Software Development Lifecycle through threat modeling, secure design reviews, automated testing, CI/CD controls and practical developer guidance.

Oversee the design, administration and continuous improvement of endpoint, identity, email, network, cloud, application, vulnerability-management and security-monitoring controls.

Ensure joiner, mover and leaver activities, RBAC, privileged access, access reviews, service-account governance and Microsoft 365 shared-resource access are timely, accurate and policy compliant.

Drive the investigation, containment, remediation, documentation and lessons learned for security events, with timely escalation of material risk and business impact.

Establish quality controls for team output, including peer review, evidence retention, ticket hygiene, runbooks and repeatable operating procedures.

Develop dashboards and concise executive-ready reporting on incidents, vulnerabilities, access, application risk, control health, team capacity, service levels and remediation progress.

Support audits, regulatory obligations, third-party incidents and control frameworks including NIST CSF, CIS Controls, PCI DSS, HIPAA, GLBA and applicable privacy requirements.

Identify automation and process-improvement opportunities that reduce repetitive work, improve response speed and strengthen control consistency.

Manage vendor and technology-partner relationships within the assigned scope, including support escalations, service performance, upgrades and security-tool optimization.

Support a 24x7 operational environment through scheduled rotation and on-call coverage for US nights and weekends, US and India holidays, incidents, critical production events and business-continuity needs.

Perform other projects and responsibilities as assigned.

QUALIFICATIONS & SKILLS

Demonstrated ability to lead technical security professionals while remaining sufficiently hands-on to review work, guide troubleshooting and manage escalations.

Broad knowledge of enterprise cybersecurity, including security operations, incident response, vulnerability management, IAM, application security, cloud security, data protection and Zero Trust.

Working knowledge of secure software development, CI/CD security, SAST, DAST, SCA, API security, container security and Infrastructure as Code controls.

Strong understanding of identity lifecycles, Active Directory, Entra ID, SSO, MFA, PAM, RBAC, OAuth, OpenID Connect, access certification and segregation of duties.

Experience operating security controls across Microsoft Azure, AWS, Windows, Linux, SaaS and enterprise-network environments.

Strong incident-management judgment, including risk-based prioritization, business-impact assessment, escalation and clear written communication under pressure.

Ability to define meaningful operational metrics, analyze trends, identify control gaps and present recommended action to technical and non-technical leaders.

Excellent written and verbal business-English communication skills, with the ability to collaborate across cultures, functions and time zones.

Proficiency in the secure and responsible use of generative AI tools such as ChatGPT, Claude, Microsoft Copilot and Google Gemini.

Working knowledge of AI and generative-AI security risks and controls, including identity, data exposure, prompt injection, insecure model or API interactions, monitoring, governance and third-party AI services.

Practical, customer-oriented leadership style with high integrity, sound judgment, adaptability, resilience and a commitment to continuous improvement.

EDUCATION & EXPERIENCE

Bachelor's degree in information technology, computer science, cybersecurity or a related field, or equivalent professional experience.

Seven or more years of progressive cybersecurity experience spanning multiple security disciplines.

At least three years of experience leading security professionals, technical operations or complex cross-functional security initiatives.

Experience supporting a US-based or global enterprise and managing services across geographically distributed teams and time zones.

Experience with audits, security frameworks, operational metrics, third-party risk and the development of standards, procedures and executive reporting.

SECURITY TOOLS

Hands-on familiarity with Microsoft Defender and Entra ID; CrowdStrike Falcon Complete/MDR, Identity Threat Protection, Shield, Recon+, Cloud Security and Next-Gen SIEM; Wiz; Zscaler ZIA, ZPA, ZDX and ZTA; Proofpoint TAP and DLP; Rapid7 InsightVM; Black Kite; and NINJIO.

Ability to oversee and validate administration, reporting, alert handling, integrations and escalation practices for application-security and DevSecOps platforms such as Burp Suite, SonarQube, GitHub CodeQL, Snyk and Veracode, plus IT service-management and IAM workflow platforms.

CERTIFICATIONS

CISSP or CISM required ; other certifications, such as CCSP, CSSLP, Microsoft security, CrowdStrike AIDR, Zscaler, identity, DevSecOps, attainable within twelve months of hire

Job Applicant Privacy Notice

EEO Statement

The Company is an equal opportunity employer. In accordance with applicable law, we prohibit discrimination against any applicant, employee, or other covered person based on any legally recognized basis, including, but not limited to: veteran status, uniformed servicemember status, race, color, caste, immigration status, religion, religious creed (including religious dress and grooming practices), sex, gender, gender expression, gender identity, marital status, sexual orientation, pregnancy (including childbirth, lactation or related medical conditions), age, national origin or ancestry, citizenship, physical or mental disability, genetic information (including testing and characteristics), protected leave status, domestic violence victim status, or any other consideration protected by federal, state or local law. We are committed to providing reasonable accommodations, if you need an accommodation to complete the application process, please email [email protected]