01 Oct
|
Focaloid Technologies
|
Mumbai
01 Oct
Focaloid Technologies
Mumbai
About the Role We are looking for a hands-on and execution-oriented Information Security Manager to take end-to-end ownership of the organization's ISO/IEC 27001:2022 Information Security Management System (ISMS) while strengthening the organization's technical security, customer security assurance, Secure SDLC, and AI security practices. This is not a purely compliance or documentation-focused role. The successful candidate will be responsible for ensuring that information security controls are continuously implemented, monitored, measured, evidenced, and improved throughout the year. The ideal candidate should be comfortable operating across GRC and technical security, independently driving security initiatives, managing audits and remediation, responding to customer security requirements, and translating security requirements into practical controls. Key Responsibilities 1. ISMS & ISO 27001 Operations – 40% Own and continuously operate the ISO/IEC 27001:2022 ISMS. Manage policies, procedures, registers, risk assessments, SoA, and compliance obligations. Drive risk identification,
treatment, monitoring, escalation, and closure. Define and track ISMS objectives, KPIs, corrective actions, and continuous improvement. Coordinate Management Reviews, internal audits, surveillance/recertification audits, and audit readiness. Drive security awareness, training, onboarding awareness, and phishing simulations. 2. Hands-on Technical Security – 25% Manage VAPT, vulnerability scanning, remediation, and retesting. Review security configurations across Microsoft 365, Entra ID, AWS/Azure, and access controls. Drive least privilege, patch compliance, and periodic access reviews. Coordinate security incident triage, containment, RCA, corrective actions, and escalation. Support CERT-In reporting, security monitoring, threat intelligence, and control improvements. 3. Customer Security Assurance & Third-Party Risk – 20% Own customer security questionnaires, assessments, due diligence,
📌 Information Security Manager (Mumbai)
🏢 Focaloid Technologies
📍 Mumbai