Location: Delhi

Work mode: Hybrid

Experience: 2 years

Opening: One

About Alyve?

Alyve Health is building India’s prevention-first health operating system, the infrastructure that enables enterprises, insurers and other institutions to deliver everyday healthcare through one connected experience.

We exist because healthcare should not begin with a hospitalization or a health scare. It should help people take the right steps earlier whether that means speaking to a doctor, getting a diagnostic test, managing a condition or building healthier habits. Alyve makes everyday health and wellness more accessible, cashless, configurable and guided, while turning every interaction into a better next step.

Today, Alyve Health powers healthcare journeys for 2.5 million+ lives across 750+ enterprise clients. Our ambition is simple and large: to help a billion Indians live fuller lives The Opportunity

We are looking for a proactive, detail-oriented Information Security and Privacy Lead to own

Alyve Health's end-to-end ISMS and Privacy programme - certification management, client security audits and continuous audit readiness - acting as the central coordination point between leadership, internal teams, consultants and auditors.

What You Will Own

- Certification and Audit Management (ISO 27001, ISO 42001, SOC 2 Type II, HIPAA,

GDPR, DPDP Act)
- Own end-to-end acquisition and renewal of Alyve Health's certifications, coordinating with external consultants through the full lifecycle.
- Run gap analyses against each framework's requirements; drive closure with explicit action plans, owners and deadlines.
- Draft and maintain the policies, SOPs, and evidence needed to demonstrate control effectiveness. • Coordinate with Finance, Product, Engineering, Legal, Growth and Customer Experience to collect evidence and confirm each function's adherence to policies.
- Conduct Internal Audits and represent Alyve Health in external audits by external agencies,





clients and certifications bodies.Run gap analyses against each framework's requirements;

drive closure with clear action plans, owners, and deadlines.

- Client Security and Privacy Audits
- Complete TPRM questionnaires and due-diligence requests from corporate clients with supporting documentation and policies.
- Represent Alyve Health in client-led security and privacy audits and close any gaps raised,

coordinating with relevant internal teams.
- Controls Maintenance and Audit Readiness
- Create and maintain the annual controls calendar and drive owners to complete each recurring activity on time.
- Keep Alyve Health continuously audit-ready.
- Maintain controls trackers and a leadership dashboard covering obligations, audits, and open items; prepare periodic MIS updates.
- Deliver internal controls training, with role-specific sessions.
- Own policy renewals, keeping each policy aligned to actual practice at the time of renewal.
- Maintain DPIAs, data processing records, and data subject requests; monitor cloud (GCP) and third-party integrations for data-privacy.
- Vendor Security
- Conduct due diligence on new and existing vendors.
- Ensure vendor contracts and SLAs carry the necessary security and data-protection clauses.

What Will Make You Effective

- Certifications:ISO 27001 Lead Auditor (LA) & ISO 27001 Lead Implementer (LI) (highly preferred),ISO 27001 Foundation & DPDP / Data Privacy Practitioner (preferred).
- 2 years of experience in information security governance, risk management, or a related domain.
- Hands-on experience in leading and coordinating certification audits, including ISO 27001,

SOC 2, HIPAA, and DPDPA, along with information security and privacy controls implementation, control calendars and policy management.
- Working knowledge of ISO 27001, ISO 42001, DPDP Act 2023, HIPAA, SOCX and cybersecurity requirements.
- Familiarity with cloud controls posture (GCP / AWS / Azure) and GRC tools
- Discretion and integrity in handling sensitive member health data and contractual information.

📌 Information security and privacy lead (Delhi)
🏢 Alyve Health
📍 Delhi