09 Oct
|
MLVeda
|
Ahmedabad
Position summaryWe are seeking an Information Security & Compliance Manager to establish, operate, and continually improve our Information Security Management System (ISMS) and security compliance program. The role will lead our readiness and ongoing compliance for ISO/IEC 27001:2022 certification and SOC 2 reporting.
The successful candidate will translate security and compliance requirements into practical processes for a growing IT organization, coordinate technical and business teams, maintain audit-ready evidence, manage security risks and incidents, and report security performance to senior management.
Key responsibilities1. ISMS, governance, and policy management• Establish, maintain, and improve the company’s ISMS in line with ISO/IEC 27001:2022.
• Define and maintain the ISMS scope, information-security objectives, interested-party requirements, Statement of Applicability (SoA), risk-treatment plan, and compliance obligations register.
• Draft, maintain, communicate, and periodically review security policies, standards, procedures, and records.
• Ensure policies and procedures are practical for the company’s actual working model, including remote work, cloud services, software development, support operations, and customer-data handling.
• Maintain a transparent RACI/responsibility matrix for security controls, including control owners, evidence owners, approvers, reviewers, and escalation paths.
• Organize management-review meetings, prepare security metrics and risk reports, record decisions, and track actions to closure.
• Coordinate internal audits, external certification audits, SOC 2 readiness assessments, and SOC 2 examinations.
2. SOC 2 program and audit evidence• Lead SOC 2 readiness and maintain compliance with the applicable Trust Services Criteria.
• Work with management and the auditor to determine the appropriate SOC 2 scope—normally Security first, with Availability, Confidentiality, Processing Integrity, and/or Privacy included only where required
📌 Information Security (Ahmedabad)
🏢 MLVeda
📍 Ahmedabad