Information Security & Compliance Specialist

Location: Mumbai (Work from Office)

Experience: 2–5 Years

About the Role

We are looking for an experienced Information Security & Compliance Specialist to strengthen our organization's cybersecurity posture and ensure compliance with global security standards. The ideal candidate should have hands-on experience in implementing ISO 27001:2022 , managing security audits, driving compliance initiatives, and working with enterprise security technologies.

If you are passionate about information security, governance, risk management, and compliance, we'd love to connect with you.

Key Responsibilities

- Lead the implementation, maintenance, and continuous improvement of ISO 27001:2022 .
- Manage compliance initiatives for SOC 2 Type II , SOX , and support regulatory frameworks including GDPR, DPDPA, PCI DSS, and ISO 27701 .
- Coordinate end-to-end internal and external security audits.
- Develop, review, and maintain Information Security Policies, Standards, and Procedures.
- Administer and monitor enterprise security solutions including:
- CrowdStrike EDR
- SIEM Platforms
- Privileged Access Management (PAM)
- Database Activity Monitoring (DAM)
- Firewalls and Network Security Solutions
- Ensure the security and integrity of Active Directory.
- Manage patch management and vulnerability remediation activities.
- Conduct risk assessments, vulnerability analysis, and security reviews.
- Identify security risks and recommend mitigation strategies.
- Monitor compliance across business and IT functions.
- Partner with IT, Legal, HR,



and business stakeholders to ensure security compliance.
- Conduct security awareness and compliance training programs.
- Stay updated with evolving cybersecurity threats and regulatory requirements.
- Prepare compliance reports, audit documentation, and security metrics.

Required Skills
- 2–5 years of experience in Information Security, Compliance, or Risk Management.
- Hands-on implementation experience with ISO 27001:2022 (Mandatory).
- Experience managing SOC 2 Type II and SOX compliance.
- Knowledge of GDPR, DPDPA, PCI DSS, and ISO 27701 .
- Solid understanding of Risk Management and Security Governance.
- Experience with:
- CrowdStrike EDR
- SIEM Solutions
- PAM
- DAM
- Firewall Administration
- Active Directory Security
- Patch Management
- Understanding of IT Infrastructure, Networking, and Application Security.
- Excellent documentation, communication, and stakeholder management skills.

Preferred Certifications
- ISO 27001 Lead Implementer or Lead Auditor
- CISSP
- CISM
- CISA

Preferred Candidate Profile

- Strong analytical and problem-solving skills.
- Ability to manage multiple security initiatives simultaneously.
- Excellent communication and interpersonal skills.
- High level of integrity, ownership, and professionalism.
- Experience coordinating with external auditors and regulatory bodies.

If you have a passion for cybersecurity, compliance, and risk management and enjoy working in a fast-paced environment, we encourage you to apply at [email protected].

📌 Information Security & Compliance Specialist (Mumbai)
🏢 The Glove
📍 Mumbai