Hi Everyone,

Hope youre doing well!

We have an urgent opening for a Manager ISMS & Data Privacy with one of our esteemed clients.
Client Location: Hyderabad

Employment Type: Fulltime
Experience Required: 8 12Years
Education: BE, MSc, MCA, Computer Science.

Job Description:

Role Overview

We are looking for a detail-oriented and experienced Manager – ISMS & Data Privacy to support end-to-end information security and privacy engagements. The role requires solid expertise in ISO 27001 implementation, policy & procedures drafting, audit handling, and DPDPA compliance, with hands-on experience in delivering client engagements across the ISMS lifecycle.

Key Responsibilities

ISMS & ISO 27001

- Lead and manage end-to-end ISMS implementations aligned with ISO 27001:2013 and ISO 27001:2022.
- Drive transition and implementation projects from ISO 27001:2013 to ISO 27001:2022.
- Develop, review, and update ISMS policies, procedures, and guidelines.
- Ensure policy lifecycle management – drafting, review, approval, and periodic updates.
- Conduct risk assessments (asset-based, process-based, and context-based approaches).
- Support control implementation, testing, and effectiveness reviews.
- Plan and execute internal audits and support external certification audits.
- Drive closure of audit findings (NCs, observations, improvements).

Risk Management & Compliance

- Perform information security risk assessments and maintain risk registers.
- Define and monitor risk treatment plans.




- Support regulatory and compliance requirements across clients.
- Ensure alignment with industry best practices and frameworks.

Data Privacy & DPDPA

- Work on DPDPA compliance programs (India-specific, beyond GDPR/HIPAA understanding).
- Conduct data mapping and data flow analysis across business processes.
- Create and maintain ROPA (Record of Processing Activities).
- Perform privacy gap assessments and DPIAs.
- Define and validate legal basis (consent, legitimate use, etc.).
- Support implementation of privacy policies and controls (not just drafting).
- Handle data principal rights management (requests, grievances, closures).
- Review and assess vendor contracts, DPAs, and third-party data sharing.

Audit & Stakeholder Management

- Manage client-facing engagements independently.
- Coordinate with stakeholders for evidence collection and audit readiness.
- Present findings, gaps, and recommendations to senior stakeholders.
- Ensure timely delivery of high-quality audit and compliance reports.

Required Skills & Competencies

- Strong knowledge of ISO 27001 (2013 & 2022) and control frameworks.
- Expertise in ISMS policy drafting and governance.
- Hands-on experience in risk assessment methodologies.
- Practical exposure to DPDPA and data privacy lifecycle activities.
- Strong documentation and report writing skills.
- Ability to manage multiple engagements and timelines.
- Good stakeholder communication and presentation skills.

📌 Information Security Manager (Hyderabad)
🏢 Shell Infotech
📍 Hyderabad