Role & responsibilities

- Define and manage ISMS (Information Security Management System) Policies, manual, guidelines, procedures.
- Responsible for managing the IT security assessment and certifications like ISO 27001, TiSAX, SOC2 Type II, NIST, CMMC, Cyber Essentials, etc.,
- Having knowledge on Cybersecurity laws, IT Acts, Data Privacy Laws and law of the land primarily for India, Americas, Europe Geos
- Coordination with respective departments (Internal / Clients / Auditors etc.,) and prepare and conducting Internal/External audits.
- Educating & training employees on Cybersecurity.
- Responsible for review and responding to RFI/RFPs related to IT / Security related questions.

Preferred candidate profile

- Define, implement, and continuously improve the organizations ISMS policies, procedures,



and governance framework aligned with ISO 27001 and other global standards

- Lead and manage end-to-end security certifications and audits (ISO 27001, SOC2, TISAX, CMMC, etc.), ensuring timely compliance and closure of findings

- Ensure multi-geo regulatory and data privacy compliance (India, US, Europe) by translating legal requirements into actionable security controls

- Coordinate with internal teams, clients, and auditors to drive audit readiness, risk mitigation, and compliance assurance across delivery units

- Drive security awareness, training programs, and support RFI/RFP responses, acting as a key interface for customer security assurance

📌 Lead - Information Security Governance & Compliance (Bengaluru)
🏢 Larsen u0026 Toubro (Lu0026T)
📍 Bengaluru