Role & responsibilities

• Define and manage ISMS (Information Security Management System) Policies, manual, guidelines, procedures.
• Responsible for managing the IT security assessment and certifications like ISO 27001, TiSAX, SOC2 Type II, NIST, CMMC, Cyber Essentials, etc.,
• Having knowledge on Cybersecurity laws, IT Acts, Data Privacy Laws and law of the land primarily for India, Americas, Europe Geos
• Coordination with respective departments (Internal / Clients / Auditors etc.,) and prepare and conducting Internal/External audits.
• Educating & training employees on Cybersecurity.
• Responsible for review and responding to RFI/RFPs related to IT / Security related questions.

Preferred candidate profile
Define, implement, and continuously improve the organizations ISMS policies, procedures,



and governance framework aligned with ISO 27001 and other global standards
Lead and manage end-to-end security certifications and audits (ISO 27001, SOC2, TISAX, CMMC, etc.), ensuring timely compliance and closure of findings
Ensure multi-geo regulatory and data privacy compliance (India, US, Europe) by translating legal requirements into actionable security controls
Coordinate with internal teams, clients, and auditors to drive audit readiness, risk mitigation, and compliance assurance across delivery units
Drive security awareness, training programs, and support RFI/RFP responses, acting as a key interface for customer security assurance

📌 Lead Information Security Governance & Compliance Mysuru
🏢 Larsen and Toubro (L&T)
📍 Mysuru