About the Role:The team:
The Information Security team is responsible for security controls relating to protecting information in all formats. We maintain a number of policies and an Information Security Management System which dictates how infosec is integrated into processes as well as tools and technical controls to directly protect against cyber security threats.
Responsibilities and impact:
We are seeking a dedicated and cooperative Information Security Engineer to join our growing Governance, Risk, and Compliance (GRC) team. In this role, you will play a pivotal part in maintaining, maturing, and auditing our information security management framework.
Key Responsibilities
Governance & ISO 27001 Management
- ISMS Governance: Manage and maintain our ISO 27001 Information Security Management System (ISMS) to ensure continuous compliance.
- Audit Facilitation: Lead internal security audits and act as a point of contact for external certification audits.
- Policy Management: Regularly review, update, and draft information security policies, standards,
and procedures to align with evolving regulatory landscapes and business needs.
GRC Operations & Risk Management
- Access Governance: Coordinate and oversee periodic user access reviews across critical systems.
- Exception Management: Evaluate, log, and monitor security policy exceptions, ensuring compensating controls are effectively implemented and tracked.
- Risk Culture: Administer the company-wide security awareness training program and orchestrate routine phishing simulations to strengthen our human firewall.
Collaboration & Communication
- Partner closely with cross-functional teams (IT, Legal, HR, and Engineering) to embed security compliance into daily operations.
- Translate complex compliance requirements into actionable, easy-to-understand guidance for non-technical stakeholders.
What we’re looking for:
Required Experience & Skills
- Experience: 3-5 years of proven experience specific
📌 Information Security Engineer (Gurugram)
🏢 Osttra
📍 Gurugram
Reply to this offer
Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.