Key Responsibilities:

- Maintain and manage DoubleTick's ISMS framework (ISO 27001 & SOC 2)
- Lead and coordinate internal and external compliance audits
- Manage policy renewals, updates, and documentation
- Face customer/vendor security assessments and respond to questionnaires
- Collaborate with engineering teams to close compliance gaps
- Conduct risk assessments and ensure appropriate controls are in place
- Build security awareness and training programs for employees
- Monitor and improve security KPIs and compliance dashboards
- Stay ahead of regulatory requirements and industry frameworks

Required Skills:

- Deep expertise in ISO 27001, SOC 2, and ISMS (4 6 years)
- Robust exposure to AWS, Google Cloud, and Azure (public cloud security best practices)




- Experience leading end-to-end compliance audits (internal & external)
- Hands-on experience with ISMS lifecycle management
- Ability to respond to customer third-party risk assessments and security RFPs
- Skilled at writing & maintaining InfoSec policies and procedures
- Excellent communication skills to bridge the gap between security & business stakeholders
- Experience in a SaaS environment (B2B preferred)
- Certifications (mandatory): ISO 27001 Lead Auditor, CISA

Skills: Information Security, Audit Compliance, Cisa, ICMS, Product Engineering, Cloud Security

Experience: 4.00-6.00 Years

📌 Senior Information Security Officer/Engineer (Mumbai)
🏢 Double Ticks
📍 Mumbai