Senior Manager - Client Business Security

We never ask for payment as part of our selection process, and we always contact candidates via our corporate accounts and platforms. If you are approached for payment, this is likely to be fraudulent. Please check to see whether the role you are interested in is posted here, on our website.

TMF Group is a leading global provider of high-value business services to clients operating and investing globally. We focus on providing specialized and business-critical financial and administrative services that enable our clients to operate their corporate structures, finance vehicles and investment funds in different geographical locations. TMF India is a Great Place to Work, ISO & ISAE certified organization.

A Senior Manager – Client Business Security is a senior, client-facing role within the Information Security function, responsible for owning security engagements across RFPs, client reviews, and audits, and for positioning the organization’s security posture as a business enabler for B2B clients. This role acts as the primary security point of contact for key client accounts, ensuring consistent, high‑quality responses to security due‑diligence activities and ongoing stakeholder expectations.

Lead security sections of client RFPs/RFIs/RFQs, including solutioning of security controls, tailoring standard responses, and coordinating inputs from technical/security SMEs to meet deadlines and win themes. Own responses to client security questionnaires and due‑diligence assessments (on portals, spreadsheets, or contractual schedules), ensuring consistency with actual practices, certifications, and risk appetite. Prepare for and participate in client security calls, walkthroughs, and workshops, clearly explaining controls, residual risks, and compensating measures to both technical and business stakeholders. Coordinate and host client security audits (on‑site and remote), including planning, evidence collection, walkthroughs, issue clarification, and tracking of findings and agreed actions to closure. Maintain and continuously improve a central knowledge base of approved security boilerplate, standard RFP answers, evidence artefacts, and FAQs to increase speed and quality of responses. Translate client security requirements into internal actions by working with platform, application, cloud, and compliance teams to close gaps, enhance controls, or agree risk‑based exceptions. Monitor and interpret evolving client, regulatory, and industry expectations (e.g., ISO 27001, SSAE 3402, HIPAA, GDPR) and feed these into security roadmap, policies, and external positioning. Support contract negotiations on security clauses, SLAs, data protection addenda, and right‑to‑audit provisions, ensuring balanced commitments that can be operationally fulfilled. Act as escalation point for client‑reported security concerns or incidents, coordinating with Incident Management, Legal, Communications, and Account Leadership to ensure timely, transparent, and compliant responses.

Serve as the primary information security interface for strategic and high‑value clients, representing the organization’s security posture in pre‑sales, delivery, and ongoing relationship stages. Own end‑to‑end management of client security due‑diligence activities, including RFPs, security questionnaires, security annexes in contracts, and client audits. Partner with Sales, Bid Management, Legal, Delivery, and Corporate Security teams to ensure that all security commitments are accurate, feasible, and aligned to internal controls and certifications (e.g., ISO 27001, SSAE)

Pathways for career development Work with colleagues and clients around the world on interesting and challenging work. We provide internal career opportunities, so you can take your career further within TMF. Continuous development is supported through global learning opportunities from the TMF Business Academy.