06 Sep
|
Promaynov Advisory Services
|
GTB Nagar
06 Sep
Promaynov Advisory Services
GTB Nagar
Role Overview
The Manager – Information Security will be responsible for establishing and managing the organisation's information security framework. The role will own the ISO 27001 certification lifecycle, drive security operations, manage information security risks, and lead internal and external audits.
The ideal candidate should have robust experience in information security operations and compliance, with proven expertise in ISO 27001 implementation and certification, security operations, cloud security, risk management, and audit management.
Key Responsibilities
ISO Certification & Compliance
- Own the end-to-end ISO 27001 ISMS implementation and certification lifecycle, from gap assessment through certification and ongoing surveillance.
- Coordinate with certification bodies and internal stakeholders to ensure continuous audit readiness.
- Track and close non-conformities and maintain audit documentation and corrective action plans.
- Ensure compliance with applicable regulations, including the IT Act, DPDP Act, and CERT-In advisories.
Security Operations
- Manage day-to-day information security operations, including threat monitoring, incident response, and vulnerability management.
- Administer security solutions including SIEM, endpoint protection, WAF, IAM, and DLP.
- Define and enforce security baselines across cloud infrastructure and API environments.
- Embed security practices into the software development lifecycle in collaboration with engineering teams through DevSecOps.
Risk Management & Governance
- Conduct periodic information security risk assessments and maintain an up-to-date risk register with mitigation plans.
- Develop, review, and maintain information security policies, standards, and procedures.
- Conduct security assessments of third-party vendors and external stakeholders.
- Report security metrics, risks, and overall security posture to senior leadership.
Audit Management
- Plan and execute internal security audits across systems,
📌 Information Security (GTB Nagar)
🏢 Promaynov Advisory Services
📍 GTB Nagar