Senior Manager - Client Business Security

• Lead security sections of client RFPs/RFIs/RFQs, including solutioning of security controls, tailoring standard responses, and coordinating inputs from technical/security SMEs to meet deadlines and win themes.
• Own responses to client security questionnaires and due‑diligence assessments (on portals, spreadsheets, or contractual schedules), ensuring consistency with actual practices, certifications, and risk appetite.
• Prepare for and participate in client security calls, walkthroughs, and workshops, clearly explaining controls, residual risks, and compensating measures to both technical and business stakeholders.
• Coordinate and host client security audits (on‑site and remote), including planning, evidence collection, walkthroughs, issue clarification, and tracking of findings and agreed actions to closure.
• Maintain and continuously improve a central knowledge base of approved security boilerplate, standard RFP answers, evidence artefacts, and FAQs to increase speed and quality of responses.
• Translate client security requirements into internal actions by working with platform, application, cloud, and compliance teams to close gaps, enhance controls, or agree risk‑based exceptions.
• Monitor and interpret evolving client, regulatory, and industry expectations (e.g., ISO 27001, SSAE 3402, HIPAA, GDPR) and feed these into security roadmap, policies, and external positioning.
• Support contract negotiations on security clauses, SLAs, data protection addenda, and right‑to‑audit provisions, ensuring balanced commitments that can be operationally fulfilled.
• Act as escalation point for client‑reported security concerns or incidents, coordinating with Incident Management, Legal, Communications, and Account Leadership to ensure timely, transparent, and compliant responses.