Assistant Manager - Security Compliance Monitoring

Company Description

Established in 2011 and headquartered in Pune, METRO Global Solution Center (GSC) India is a strategic hub driving METRO’s global transformation. With 1,200+ professionals, we deliver specialized integrated expertise across Master Data Management, Information Technology, Cyber Security, Marketing & Design, Strategy, Finance & Accounting, Controlling (FP&A), and People & Culture (HR) solutions that drive operational excellence and digital innovation.

By supporting METRO’s sCore strategy, we enable sustainable growth and strengthen business processes. With a solutions-first mindset, we reduce complexity, accelerate transformation, and create measurable value for METRO businesses scaling up globally. METRO is a leading international food wholesaler operating in over 30 countries with a strong network of wholesale stores, digital marketplaces, and food service distribution. It supports businesses that keep the world running, from hotels, restaurants, and cafés to local retailers - offering quality, reliability, and smart solutions that help small and medium-sized businesses succeed.

Headquartered in Düsseldorf, Germany, METRO AG employs over 85,000 people worldwide and acts as the central management holding company of the group, driving strategic direction, and enabling consistent excellence across all markets. Around the world, METRO has approx. 15 million customers who benefit from the wholesale company’s unique multichannel mix: customers can purchase their goods in one of the large stores in their area as well as by delivery (Food Service Distribution, FSD) – all digitally supported and connected. In parallel, METRO MARKETS is being developed as an international online marketplace for professional customers, which has been growing and expanding continuously since 2019.

Acting sustainably is one of the company principles of METRO, which has been listed in various sustainability indices and rankings, including MSCI, Sustainalytics and CDP.

Job Description

Role purpose

Lead the day-to-day operations of the Pune Security Compliance Monitoring team, which serves as the operational engine for the group ISMS (ISO 27001), AI governance (ISO 42001), and adjacent regulatory programs. Accountable for the quality, timeliness, and continuous improvement of monitoring outputs; first-line people manager for the analysts and senior analyst.

Key responsibilities

• Plan, assign, and quality-assure day-to-day monitoring of security controls across roughly 45–50 group business entities.
• Own offshore delivery of evidence collection, control testing, exception tracking, and remediation follow-up against the ISMS baseline.
• Run the operational rhythm: stand-ups, weekly reviews, workload balancing, and structured escalation into your manager.
• Manage, coach, and develop the team; set objectives, run 1:1s, conduct performance reviews, and build career paths.
• Continuously improve workflows; identify automation candidates with the Control Automation team; maintain SOPs and runbooks.
• Track team KPIs (cycle time, evidence quality, remediation aging, audit findings) and support internal and external audits.

Qualifications

Must-have qualifications

• Minimum Graduation required
• 6+ years in information security, GRC, or IT audit, with at least 2 years in a people-management or formal team-lead role.
• Strong working knowledge of ISO/IEC 27001 (Annex A, ISMS lifecycle), control testing, and risk management fundamentals.
• Demonstrable experience leading a compliance or audit team in a global enterprise or shared-services / GCC setup.
• Excellent written and spoken English; able to communicate clearly with senior onshore stakeholders.
• Relevant certification: CISA, CISM, ISO 27001 Lead Implementer / Lead Auditor, or equivalent.

Nice to have

• Exposure to AI governance (ISO/IEC 42001, NIST AI RMF), NIS2, or DORA.
• Experience working with German or European parent organizations.

Additional Information